<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3518">
<package pkgid="ba8907f01cdcca595a526ceb39b2b552f33b3ba0287e3c857eee1e3f89e4a878" name="ImageMagick" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="486fa547d1dfcd27525ab2e010f7620b441f05552585c704c160b6bc1a5ab750" name="ImageMagick" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="6a0c103602f3da361ee087fe464ea13c832c1001b2a8ae02b01502aeab7a6f25" name="ImageMagick" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="0685bdbb91ab26b934a48b0e68a1add4e172a16549ecc79512d7905a29f60977" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="14fc3faacc829b417654d075a2d8b98896202c25ef647d559bb4accd5e91174d" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="5acefacb28b0228d26c351bbb22f55ade663c1c222afc6aed1ee25c934d5123e" name="ImageMagick-config-7-SUSE" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="81ae04a9bef9277dd12552ab14a6ff66f47fc390848c1dc5e9d9d5ac89ee622f" name="ImageMagick-config-7-SUSE" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="d7084fd1e22eaca9cb364ff17a8cda0075c250353c722044ef8fe66c8e42415a" name="ImageMagick-config-7-SUSE" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="786bb8d768283fbc08e945b1f4ce456bb23c748260fea5c04ba703fd149fb8c8" name="ImageMagick-config-7-SUSE" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="e97c092c9258b8fb7efa0ea42c3aea81a30b0b909db6da8e974e8f2d3f90225b" name="ImageMagick-config-7-upstream" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="a153c32f4b559bd10050623f4604e908d1642c40b1f2ed258420dd70003fa47b" name="ImageMagick-config-7-upstream" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="b72e0e3c97d956ae85185a63e064fd461b49994bf3f89bb18474629b77e60179" name="ImageMagick-config-7-upstream" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="cfa95f0ae5f93ec21e1811ad24eb187b5dc84a29dab98bb19018d0c4d3070558" name="ImageMagick-config-7-upstream" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="71b657ff9ca71eaf136c1d140d728fea74b3f822114018204aad7964e13dfc83" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="640392b0b5b3158128ffba478f9216b94486f0d5f0a343f7046ab40318285d4d" name="ImageMagick-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="f06e731b0781fbec3b3d9079989c80d8fab3e2d94e94bdc12c12f4005603dde2" name="ImageMagick-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="8738edd19cca0877d8bad543804ff5890445d56caf6cfdf32c5bdb46f234e9dd" name="ImageMagick-devel" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="f9cba107f36c222e571c4dc472c978781d74d8d9c4e140cd91a20b04423c6e81" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="29c13e89371e218db533ebdaf963eda2a42bdac25e4f63c07d03ea79b3905cc1" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="a753076793e88773dbfe79394c964e51f87367d8b6414962af58b0a6fa1b72da" name="ImageMagick-extra" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="847610414d1717f7b640cbf23fb8d904c0c15f0604b322025eb92e2315832430" name="ImageMagick-extra" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="2c719d796abe6d575a2d07c4eec6c53ee596c886712d8393d915410d828a856d" name="ImageMagick-extra" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="684b2d804af4de52616893d48121629c4ef01ad047316e47140ba0e57697e8e6" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="e650172f967f562a3fae4ec826cb58e14c2a0e94bb7ce669675c6d32bb6f65df" name="MozillaFirefox" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="2853325f65c7625fe32ff857acd19adc790bf5a0eb2be469a866c39e557027b3" name="MozillaFirefox" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="c800fbaafc651735011edd6a7ef5a0df8927a69339766feff6a511debe148c14" name="MozillaFirefox" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="94a8faf168f5b02bcaf7d83ba832c42ebc0c8de01709f5d5c2e1da02a00e8d23" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="b50228f63691b44276eb5224d2dcdd976e5435c281b5d0f93d6259ef1be680c7" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="d58bb662f9371f62b5a1def1975060a0cf547499872581f22069fa505be9c763" name="MozillaFirefox-branding-upstream" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="cc17068a3d15c654f79f9c113c1b2a360c0445961b5c8d6062e1e188ffa76ce5" name="MozillaFirefox-branding-upstream" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="15de9d1138150b081aad2cf5b993bf61e55700198d02212487362daad30de0f6" name="MozillaFirefox-branding-upstream" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="a2f85bc9354531b29daa781d516dc35bc6ea4720cd952810deb4ee1cddb0b279" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="bb76eaefdb413468067d7f3ca56cd98b1e57fc2b2b41b6057ee30f83b48763af" name="MozillaFirefox-devel" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="7a38525cff3347313f6b7a1f3c4ff4d522e8f7994372666cebde6dfa1de2ff6f" name="MozillaFirefox-devel" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="3503a54c9766340145da2d5b5e53a0ea96fb2a343247e6ff890749aeca87bd44" name="MozillaFirefox-devel" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="1f487246274eae67d89aa9bc39b6dc033c3bd516a014919346ad661cd11edbf0" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="f6dac9f631c92d39e33de6a27ae964d510d5b282b972f053ec4fce2a8ad54017" name="MozillaFirefox-translations-common" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="b6f1c5fbb47511a1e8ae2f2e66efb68707873697270e336a5b8ba0809f4051e5" name="MozillaFirefox-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="dfd6a3dfebf438e1772d66da767f8e90d0f55afd5f20bd349e09bc03931b857c" name="MozillaFirefox-translations-common" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="7d3e608135db1e558a22dfa9fb796a9078e0fb9ff9c70de1f6483f1195ab2c09" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="98d3464236e8d9960c102876a723ffa298073eb3ef71c69b6745db10294286c2" name="MozillaFirefox-translations-other" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="cd611c878b498775c87a2a9b90cbcfee99a537edc034474e00cad172495bf0d5" name="MozillaFirefox-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="c5c0a5edd1a03453d45eb1cf0d1fd61389cf70ef532001e24fcce60045b7e82b" name="MozillaFirefox-translations-other" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="e3a9e5c6e7094ebe6e4a2571d14beee03fc6d0528c40b51172602bcac2f7cf87" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.152.90.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1647518400">- Add cpu-flag `asimdrdm` to aarch64 constraints, to select newer,
  faster buildhosts, as the others struggle to build FF.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1648641600">- Adjust rust dependency for SP3 and later. TW uses always the
  newest version of rust, but we don't, so we can't use the
  rust+cargo notation, which would need both &lt; and &gt;= requirements.
  (bsc#1197698)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1649160000">- Firefox Extended Support Release 91.8.0 ESR
  MFSA 2022-14 (bsc#1197903)
  * CVE-2022-1097 (bmo#1745667)
    Use-after-free in NSSToken objects
  * CVE-2022-28281 (bmo#1755621)
    Out of bounds write due to unexpected WebAuthN Extensions
  * CVE-2022-1196 (bmo#1750679)
    Use-after-free after VR Process destruction
  * CVE-2022-28282 (bmo#1751609)
    Use-after-free in DocumentL10n::TranslateDocument
  * CVE-2022-28285 (bmo#1756957)
    Incorrect AliasSet used in JIT Codegen
  * CVE-2022-28286 (bmo#1735265)
    iframe contents could be rendered outside the border
  * CVE-2022-24713 (bmo#1758509)
    Denial of Service via complex regular expressions
  * CVE-2022-28289 (bmo#1663508, bmo#1744525, bmo#1753508,
    bmo#1757476, bmo#1757805, bmo#1758549, bmo#1758776)
    Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1651060800">- Firefox Extended Support Release 91.9.0 ESR
  MFSA 2022-17 (bsc#1198970)
  * CVE-2022-29914 (bmo#1746448)
    Fullscreen notification bypass using popups
  * CVE-2022-29909 (bmo#1755081)
    Bypassing permission prompt in nested browsing contexts
  * CVE-2022-29916 (bmo#1760674)
    Leaking browser history with CSS variables
  * CVE-2022-29911 (bmo#1761981)
    iframe Sandbox bypass
  * CVE-2022-29912 (bmo#1692655)
    Reader mode bypassed SameSite cookies
  * CVE-2022-29917 (bmo#1684739, bmo#1706441, bmo#1753298,
    bmo#1762614, bmo#1762620, bmo#1764778)
    Memory safety bugs fixed in Firefox 100 and Firefox ESR 91.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653048000">- Firefox Extended Support Release 91.9.1 ESR
  * Fixed: Security fix
  MFSA 2022-19 (bsc#1199768)
  * CVE-2022-1802 (bmo#1770137)
    Prototype pollution in Top-Level Await implementation
  * CVE-2022-1529 (bmo#1770048)
    Untrusted input used in JavaScript object indexing, leading
    to prototype pollution</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1653912000">- Firefox Extended Support Release 91.10.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-21 (bsc#1200027)
  * CVE-2022-31736 (bmo#1735923)
    Cross-Origin resource's length leaked
  * CVE-2022-31737 (bmo#1743767)
    Heap buffer overflow in WebGL
  * CVE-2022-31738 (bmo#1756388)
    Browser window spoof using fullscreen mode
  * CVE-2022-31739 (bmo#1765049)
    Attacker-influenced path traversal when saving downloaded
    files
  * CVE-2022-31740 (bmo#1766806)
    Register allocation problem in WASM on arm64
  * CVE-2022-31741 (bmo#1767590)
    Uninitialized variable leads to invalid memory read
  * CVE-2022-31742 (bmo#1730434)
    Querying a WebAuthn token with a large number of
    allowCredential entries may have leaked cross-origin
    information
  * CVE-2022-31747 (bmo#1760765, bmo#1765610, bmo#1766283,
    bmo#1767365, bmo#1768559, bmo#1768734)
    Memory safety bugs fixed in Firefox 101 and Firefox ESR 91.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1655899200">- Firefox Extended Support Release 91.11.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-25 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1658404800">- Firefox Extended Support Release 91.12.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-29 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="cgrobertson@suse.com" date="1661256000">- Firefox Extended Support Release 91.13.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-35 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- Firefox 102.2.0esr ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-34 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Firefox 104 and Firefox ESR 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Firefox 104, Firefox ESR 102.2,
    and Firefox ESR 91.13
- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Firefox Extended Support Release 102.1 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-30 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Firefox 103 and 102.1
- Firefox Extended Support Release 102.0.1 ESR
  * Fixed: Fixed bookmark shortcut creation by dragging to
    Windows File Explorer and dropping partially broken
    (bmo#1774683)
  * Fixed: Fixed bookmarks sidebar flashing white when opened in
    dark mode (bmo#1776157)
  * Fixed: Fixed multilingual spell checking not working with
    content in both English and a non-Latin alphabet
    (bmo#1773802)
  * Fixed: Developer tools:  Fixed an issue where the console
    output keep getting scrolled to the bottom when the last
    visible message is an evaluation result (bmo#1776262)
  * Fixed: Fixed *Delete cookies and site data when Firefox is
    closed* checkbox getting disabled on startup (bmo#1777419)
  * Fixed: Various stability fixes
- Firefox 102.0 ESR
  * New:
  - We now provide more secure connections: Firefox can
    now automatically upgrade to HTTPS using HTTPS RR as Alt-Svc
    headers.
  - For added viewing pleasure, full-range color levels are now
    supported for video playback on many systems.
  - Find it easier now! Mac users can now access the macOS
    share options from the Firefox File menu.
  - Voilà! Support for images containing ICC v4 profiles is
    enabled on macOS.
  - Firefox now supports the new AVIF image format, which is
    based on the modern and royalty-free AV1 video codec. It
    offers significant bandwidth savings for sites compared to
    existing image formats. It also supports transparency and
    other advanced features.
  - Firefox PDF viewer now supports filling more forms (e.g.,
    XFA-based forms, used by multiple governments and banks).
    Learn more.
  - When available system memory is critically low, Firefox on
    Windows will automatically unload tabs based on their last
    access time, memory usage, and other attributes. This helps
    to reduce Firefox out-of-memory crashes. Forgot something?
    Switching to an unloaded tab automatically reloads it.
  - To prevent session loss for macOS users who are running
    Firefox from a mounted .dmg file, they’ll now be prompted to
    finish installation. Bear in mind, this permission prompt
    only appears the first time these users run Firefox on their
    computer.
  - For your safety, Firefox now blocks downloads that rely on
    insecure connections, protecting against potentially
    malicious or unsafe downloads. Learn more and see where to
    find downloads in Firefox.
  - Improved web compatibility for privacy protections with
    SmartBlock 3.0: In Private Browsing and Strict Tracking
    Protection, Firefox goes to great lengths to protect your web
    browsing activity from trackers. As part of this, the built-
    in content blocking will automatically block third-party
    scripts, images, and other content from being loaded from
    cross-site tracking companies reported by Disconnect. Learn
    more.
  - Introducing a new referrer tracking protection in Strict
    Tracking Protection and Private Browsing. This feature
    prevents sites from unknowingly leaking private information
    to trackers. Learn more.
  - Introducing Firefox Suggest, a feature that provides
    website suggestions as you type into the address bar. Learn
    more about this faster way to navigate the web and locale-
    specific features.
  - Firefox macOS now uses Apple's low-power mode for
    fullscreen video on sites such as YouTube and Twitch. This
    meaningfully extends battery life in long viewing sessions.
    Now your kids can find out what the fox says on a loop
    without you ever missing a beat…
  - With this release, power users can use about:unloads to
    release system resources by manually unloading tabs without
    closing them.
  - On Windows, there will now be fewer interruptions because
    Firefox won’t prompt you for updates. Instead, a background
    agent will download and install updates even if Firefox is
    closed.
  - On Linux, we’ve improved WebGL performance and reduced
    power consumption for many users.
  - To better protect all Firefox users against side-channel
    attacks, such as Spectre, we introduced Site Isolation.
  - Firefox no longer warns you by default when you exit the
    browser or close a window using a menu, button, or three-key
    command. This should cut back on unwelcome notifications,
    which is always nice—however, if you prefer a bit of notice,
    you’ll still have full control over the quit/close modal
    behavior. All warnings can be managed within Firefox
    Settings. No worries! More details here.
  - Firefox supports the new Snap Layouts menus when running on
    Windows 11.
  - RLBox—a new technology that hardens Firefox against
    potential security vulnerabilities in third-party
    libraries—is now enabled on all platforms.
  - We’ve reduced CPU usage on macOS in Firefox and
    WindowServer during event processing.
  - We’ve also reduced the power usage of software decoded
    video on macOS, especially in fullscreen. This includes
    streaming sites such as Netflix and Amazon Prime Video.
  - You can now move the Picture-in-Picture toggle button to
    the opposite side of the video. Simply look for the new
    context menu option Move Picture-in-Picture Toggle to Left
    (Right) Side.
  - We’ve made significant improvements in noise suppression
    and auto-gain-control, as well as slight improvements in
    echo-cancellation to provide you with a better overall
    experience.
  - We’ve also significantly reduced main-thread load.
  - When printing, you can now choose to print only the
    odd/even pages.
  - Firefox now supports and displays the new style of
    scrollbars on Windows 11.
  - Firefox has a new optimized download flow. Instead of
    prompting every time, files will download automatically.
    However, they can still be opened from the downloads panel
    with just one click. Easy! More information
  - Firefox no longer asks what to do for each file by default.
    You won’t be prompted to choose a helper application or save
    to disk before downloading a file unless you have changed
    your download action setting for that type of file.
  - Any files you download will be immediately saved on your
    disk. Depending on the current configuration, they’ll be
    saved in your preferred download folder, or you’ll be asked
    to select a location for each download. Windows and Linux
    users will find their downloaded files in the destination
    folder. They’ll no longer be put in the Temp folder.
  - Firefox allows users to choose from a number of built-in
    search engines to set as their default. In this release, some
    users who had previously configured a default engine might
    notice their default search engine has changed since Mozilla
    was unable to secure formal permission to continue including
    certain search engines in Firefox.
  - You can now toggle Narrate in ReaderMode with the keyboard
    shortcut "n."
  - You can find added support for search—with or without
    diacritics—in the PDF viewer.
  - The Linux sandbox has been strengthened: processes exposed
    to web content no longer have access to the X Window system
    (X11).
  - Firefox now supports credit card autofill and capture in
    Germany, France, and the United Kingdom.
  - We now support captions/subtitles display on YouTube, Prime
    Video, and Netflix videos you watch in Picture-in-Picture.
    Just turn on the subtitles on the in-page video player, and
    they will appear in PiP.
  - Picture-in-Picture now also supports video captions on
    websites that use Web Video Text Track (WebVTT) format (e.g.,
    Coursera.org, Canadian Broadcasting Corporation, and many
    more).
  - On the first run after install, Firefox detects when its
    language does not match the operating system language and
    offers the user a choice between the two languages.
  - Firefox spell checking now checks spelling in multiple
    languages. To enable additional languages, select them in the
    text field’s context menu.
  - HDR video is now supported in Firefox on Mac—starting with
    YouTube! Firefox users on macOS 11+ (with HDR-compatible
    screens) can enjoy higher-fidelity video content. No need to
    manually flip any preferences to turn HDR video support
    on—just make sure battery preferences are NOT set to
    “optimize video streaming while on battery”.
  - Hardware-accelerated AV1 video decoding is enabled on
    Windows with supported GPUs (Intel Gen 11+, AMD RDNA 2
    Excluding Navi 24, GeForce 30). Installing the AV1 Video
    Extension from the Microsoft Store may also be required.
  - Video overlay is enabled on Windows for Intel GPUs,
    reducing power usage during video playback.
  - Improved fairness between painting and handling other
    events. This noticeably improves the performance of the
    volume slider on Twitch.
  - Scrollbars on Linux and Windows 11 won't take space by
    default. On Linux, users can change this in Settings. On
    Windows, Firefox follows the system setting (System Settings
    &gt; Accessibility &gt; Visual Effects &gt; Always show scrollbars).
  - Firefox now ignores less restricted referrer
    policies—including unsafe-url, no-referrer-when-downgrade,
    and origin-when-cross-origin—for cross-site
    subresource/iframe requests to prevent privacy leaks from the
    referrer.
  - Reading is now easier with the prefers-contrast media
    query, which allows sites to detect if the user has requested
    that web content is presented with a higher (or lower)
    contrast.
  - All non-configured MIME types can now be assigned a custom
    action upon download completion.
  - Firefox now allows users to use as many microphones as they
    want, at the same time, during video conferencing. The most
    exciting benefit is that you can easily switch your
    microphones at any time (if your conferencing service
    provider enables this flexibility).
  - Print preview has been updated.
  * Fixed: Various security fixes.
  MFSA 2022-24 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-34482 (bmo#845880)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34483 (bmo#1335845)
    Drag and drop of malicious image could have led to malicious
    executable and potential code execution
  * CVE-2022-34476 (bmo#1387919)
    ASN.1 parser could have been tricked into accepting malformed
    ASN.1
  * CVE-2022-34481 (bmo#1483699, bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-34474 (bmo#1677138)
    Sandboxed iframes could redirect to external schemes
  * CVE-2022-34469 (bmo#1721220)
    TLS certificate errors on HSTS-protected domains could be
    bypassed by the user on Firefox for Android
  * CVE-2022-34471 (bmo#1766047)
    Compromised server could trick a browser into an addon
    downgrade
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34480 (bmo#1454072)
    Free of uninitialized pointer in lg_init
  * CVE-2022-34477 (bmo#1731614)
    MediaError message property leaked information on cross-
    origin same-site pages
  * CVE-2022-34475 (bmo#1757210)
    HTML Sanitizer could have been bypassed via same-origin
    script via use tags
  * CVE-2022-34473 (bmo#1770888)
    HTML Sanitizer could have been bypassed via use tags
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Firefox 102 and Firefox ESR 91.11
  * CVE-2022-34485 (bmo#1768409, bmo#1768578)
    Memory safety bugs fixed in Firefox 102
- Add patch one_swizzle_to_rule_them_all.patch to fix big endian
  platforms and remove old patches for this:
  mozilla-bmo1626236.patch, mozilla-bmo1602730.patch,
  mozilla-bmo1504834-part2.patch, mozilla-bmo1504834-part4.patch
- Rename and rebase firefox-i586-conflict-typedef-error.patch
  to mozilla-bmo531915.patch
- Remove upstreamed mozilla-sandbox-fips.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1663329600">- Firefox Extended Support Release 102.3.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-40 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Firefox 105 and Firefox ESR 102.3
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Firefox Extended Support Release 102.4.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-45 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Firefox 106 and Firefox ESR 102.4
- Added mozilla-partial-revert-1768632.patch to fix build on i586</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668081600">- Firefox Extended Support Release 102.5.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-48 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Firefox 107 and Firefox ESR 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670500800">- Firefox Extended Support Release 102.6.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Firefox 108 and Firefox ESR 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673611200">- Firefox Extended Support Release 102.7.0 ESR
  * Fixed: Various stability, functionality, and security fixes.
  MFSA 2023-02 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Firefox 109 and Firefox ESR 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- Firefox Extended Support Release 102.8.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-06 (bsc#1208144)
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-25743 (bmo#1800203)
    Fullscreen notification not shown in Firefox Focus
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Firefox with some
    device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25744 (bmo#1789449, bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Firefox 110 and Firefox ESR 102.8
  * CVE-2023-25746 (bmo#1544127, bmo#1762368)
    Memory safety bugs fixed in Firefox ESR 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1678622400">- Firefox Extended Support Release 102.9.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-10 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Firefox 111 and Firefox ESR 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680782400">- Firefox Extended Support Release 102.10.0 ESR
  * Fixed: Various security fixes.
  MFSA 2023-14 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Firefox 112 and Firefox ESR
    102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683547200">- Firefox Extended Support Release 102.11.0 ESR
  * Fixed: Various security fixes and other quality improvements.
  MFSA 2023-17 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Firefox 113 and Firefox ESR
    102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685620800">- Firefox Extended Support Release 102.12.0 ESR
  Placeholder changelog-entry (bsc#1211922)
- update keyring</changelog>
</package>
<package pkgid="98adad82248406d5623d2282b8885d029c34c7530241d8e5cd1a9155894dfbe4" name="MozillaThunderbird" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="1f0bbf555af6307300d3d5c39aef8dc5fd47e41387a2d3d82c6ec6b275d1afb2" name="MozillaThunderbird" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="c95728db0b64ac434eda5c2dc7d0a0ac9f0acea51d3b87d1db08fdd36f4090be" name="MozillaThunderbird" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="0fb2681fd2784bf48573919fbf4d100749be7ec4becd6e7ec4b0c3919a895f32" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="b9be22d42d9490deba8f199db6f08fa0b544af0012c67452d733d487eb4b29b7" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="d892148a7324b46aad1476d007228ac4abbef2114fa037a192ba7f2117fd2029" name="MozillaThunderbird-translations-common" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="3bd4c96d848505302d6029d9de6dcce8e444d749138ef778db8e2c256e8ed104" name="MozillaThunderbird-translations-common" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="5927f2baff0582dc78319f8003abf48c8da8d2f687115b502ea60b6688c63fb1" name="MozillaThunderbird-translations-common" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="2d831de5e58717e08360cad7f24dbdc8e31f1bd2c3f13b0dd1bde8f6959237a9" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="bb2a1aac7b51071730b3b2fb2e331c109e5c5e90bd6af97d4a03e42068550863" name="MozillaThunderbird-translations-other" arch="aarch64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="404ca89e80132abb3d65219149ff408541f36d4a7f2576aaff0e7e9f1202c451" name="MozillaThunderbird-translations-other" arch="ppc64le">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="ac5dbc40c6ef924f35686b94acccb2f690801c038900230996901b0d31e7f006" name="MozillaThunderbird-translations-other" arch="s390x">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="3a7bc643b24257f5aa4a75d0a576fdb138158d8be9bd5155674931a9f35d5d5b" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="102.12.0" rel="150200.8.121.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1659096000">- Mozilla Thunderbird 91.12
  * changed: Support for Google Talk chat accounts removed
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Various security fixes
  MFSA 2022-31 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1659960000">- Add mozilla-bmo1775202.patch to fix build on ppc64le
- Mozilla Thunderbird 102.1.1
  * changed: OpenPGP Key Manager will clear selected keys after a
    deletion is performed
  * fixed: Update notification popups were still displayed after
    switching to another desktop workspace on Linux
  * fixed: macOS display issues made Thunderbird unusable
  * fixed: OpenPGP public key was not automatically attached
    after enabling encryption from reminder and default setting
    is "Do not encrypt"
  * fixed: Importing OpenPGP keys stored in binary format failed
  * fixed: Exporting an OpenPGP public key from Account Settings
    failed
  * fixed: Saving encrypted OpenPGP attachments created corrupt
    files
  * fixed: Receiving many OpenPGP keys in a single email caused
    Thunderbird to hang
  * fixed: POP3 message download progress bar was not displayed
  * fixed: OAuth2 authentication was not available when the mail
    domain did not match the OAuth provider domain
  * fixed: OAuth did not work with some POP servers
  * fixed: RSS feed URL links in headers panel could not be
    activated by keyboard
  * fixed: Self-signed TLS certificates did not work with POP3
    connections
  * fixed: Non-ascii characters in passwords did not work with
    POP3 connections
  * fixed: An error was not displayed when an incorrect password
    was entered for a POP3 account
  * fixed: NNTP articles were not displayed in preview pane when
    a Primary Password was set
  * fixed: NNTP articles did not download when the hostname of
    the server was not all in lower-case
  * fixed: Saving NNTP messages to local disk failed
  * fixed: Drag and Drop from Address Book into Compose window
    sometimes added unexpected contacts to the target
  * fixed: "Default" label not shown for emails when editing a
    contact
  * fixed: Contact Title, Role, and Organization fields could be
    displayed in the wrong order
  * fixed: Contact birthdays on February 29 were displayed
    incorrectly in non-leap years
  * fixed: Detection of photos in vCards improved
  * fixed: Drag and drop contacts to another address book was not
    available
  * fixed: Contacts stored in a Google CardDAV address book
    contained extra backslashes in text fields
  * fixed: Contacts without First/Last/Display Names appeared
    blank in contact list
  * fixed: Auto-attaching vCard and OpenPGP keys did not always
    work as expected
  * fixed: Settings page used caused excessive CPU usage
  * fixed: Calendar did not respect `Date and Time Formatting` in
    Settings
  * fixed: OpenPGP Key Import wizard did not adapt to dark theme
  * fixed: Various visual and theme improvements
  * fixed: Various accessibility improvements
  * unresolved: "Get Map" feature missing from address book for
    physical addresses
- Mozilla Thunderbird 102.1.0
  * fixed: Activity Manager did not display POP message downloads
  * fixed: Mail Folder Properties dialog was not sized correctly,
    cutting off contents
  * fixed: Expired news messages did not display an error
  * fixed: Calendar Column Picker closed prematurely after
    selecting/deselecting a single column
  * fixed: Various UI improvements
  * fixed: Various security fixes
  MFSA 2022-32 (bsc#1201758)
  * CVE-2022-36319 (bmo#1737722)
    Mouse Position spoofing with CSS transforms
  * CVE-2022-36318 (bmo#1771774)
    Directory indexes for bundled resources reflected URL
    parameters
  * CVE-2022-36314 (bmo#1773894)
    Opening local &lt;code&gt;.lnk&lt;/code&gt; files could cause unexpected
    network loads
  * CVE-2022-2505 (bmo#1769739, bmo#1772824)
    Memory safety bugs fixed in Thunderbird 102.1
- Mozilla Thunderbird 102.0.3
  * changed: Support for Google Talk chat accounts removed
  * fixed: Thunderbird could crash on startup on Windows 11
  * fixed: After compacting folders, new downloaded messages were
    inaccessible
  * fixed: Marking a message as a Favorite (starred) did not
    update the thread pane when using Unified Folders
  * fixed: Compose window failed to populate some fields when
    S/MIME was configured
  * fixed: Non-text attachments has an incorrect
    "charset=windows-1250" mime header
  * fixed: Messages sent as attachments incorrectly had an
    "X-Mozilla-Cloud-Part" header
  * fixed: Improved Address Book import/export support in Profile
    Importer
  * fixed: IMAP stability improvements
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: Signing S/MIME messages failed
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.2
  * changed: Double-clicking chat messages will no longer execute
    a default action
  * fixed: "File" menu was covered by Spaces Toolbar
  * fixed: Sub-folders with new messages were not highlighted
    until clicked
  * fixed: Attachment paper clip was cut off in message list
  * fixed: OpenPGP signatures were broken when "Primary Password"
    dialog remained open
  * fixed: Non-ASCII messages forwarded as attachments were
    garbled
  * fixed: Importing from Seamonkey or Outlook failed in second
    step
  * fixed: Deleting messages from a POP server occasionally
    failed
  * fixed: Offline cache was unusable for NNTP accounts
  * fixed: News messages were not shown in preview pane
  * fixed: Address fields were not populated when using "Edit as
    new message"
  * fixed: Sometimes only the first letter of a contact's
    Organization name was displayed
  * fixed: Double-click to edit selected contacts action did not
    work
  * fixed: Some CardDAV contact fields were displayed with
    additional backslashes in the value
  * fixed: Pending chat message contents were not updated when
    the conversation was not selected
  * fixed: Various UI improvements
- Mozilla Thunderbird 102.0.1
  * fixed: Mailbox MSF files could become corrupt in some
    circumstances
  * fixed: OpenPGP Key Assistant did not show status for
    addresses handled by aliases
  * fixed: Attaching an external OpenPGP public key failed if
    configured with a subkey ID
  * fixed: Thunderbird continued using an old password after
    changing it
  * fixed: New mail notifications were only shown for one mail
    account when multiple accounts were configured
  * fixed: LDAP Address Books could not be configured using IPv6
    address literals
  * fixed: CardDAV contacts (notably Google-hosted) with more
    than one email address were not always editable
  * fixed: Address Book accessibility improvements
  * fixed: Various UI improvements
  * fixed: Icons converted to new style
- Mozilla Thunderbird 102.0
  * new: Thunderbird will now display a message when an upgrade
    migration task is taking a long time to complete
  * new: es-MX localized build now available
  * new: What's new link displayed in About: dialog
  * new: Profile Import/Export UI refreshed and moved to a tab
  * new: Commandline tools now included for OpenPGP debugging
  * new: Thunderbird may now be built with OpenPGP support and a
    system librnp
  * new: Added menu option to permanently decrypt OpenPGP
    encrypted messages to a folder
  * new: OpenPGP: Public keys from email attachments and
    autocrypt headers now cached for future use
  * new: Expired OpenPGP recipient keys now indicated in compose
    window
  * new: OpenPGP Key Assistant enabled by default
  * new: OpenPGP Key Properties now supports refreshing keys from
    key server
  * new: Spaces vertical toolbar for easier in-app navigation
  * new: Compose toolbar button for OpenPGP &amp; S/MIME signing
    available via "Customize Toolbar"
  * new: "Select all addresses" now supported from composer pill
    context menu
  * new: Multiple active spelling dictionaries now supported in
    compose window
  * new: `Add dictionaries` item added to `Spelling` button in
    compose window
  * new: Added config option to more aggressively warn sender
    about having many public recipients to an email
    (`mail.compose.warn_public_recipients.aggressive`)
  * new: Exporting current profile now supported on importing tab
  * new: Back/Forward keyboard shortcuts added to Addon Manager
  * new: New Address Book UI and significant backend overhaul
  * new: Importing sqlite address books now supported
  * new: Importing addressbooks via CSV file now supports semi-
    colon (;) delimited files
  * new: Opening a **news://** URL now works if an account is not
    configured for that news server
  * new: Google Talk chat accounts now support logging in with
    OAuth2
  * new: Matrix chat support enabled by default. This is a
  * *beta** feature.
  * new: Printing using the system dialog without preview now
    supported; Set `print.prefer_system_dialog` to `true`
  * new: Removing events from a calendar now prompts for
    confirmation
  * new: Upcoming events in the Today Pane show how far away they
    are
  * new: Icons now displayed on recurring events and modified
    events within a recurring series
  * changed: SMTP client will now ignore socket errors after
    `QUIT` command is sen
  * changed: Javascript POP implementation enabled by default
  * changed: Buttons on "Update Failed" popup now open Beta and
    Release specific pages on Thunderbird website
  * changed: Replace "About Junk Mail" dialog with a link to the
    support page
  * changed: [macOS] Account settings moved to application menu
  * changed: New profiles will default to using "Threaded"
    message view
  * changed: "Discover OpenPGP Key" context menu item is no
    longer displayed when a key is already available
  * changed: Duplicated OpenPGP encrypted attachments were shown
    when `display-attachments-inline` was enabled
  * changed: Replaced Security compose toolbar button with
    Encryption toggle and Encryption options buttons
  * changed: OpenPGP dialog for key "acceptance per email" now
    displayed in more circumstances
  * changed: OpenPGP `Key Manager` dialog layout improvements
  * changed: Writing OpenPGP keyring data will block Thunderbird
    shutdown to prevent data loss
  * changed: When automatically attaching OpenPGP keys to emails,
    Thunderbird will strip key certificates
  * changed: A notification bar in the compose window will be
    displayed if encryption is possible but not enabled
  * changed: Inline attachment filenames now sent without data-
    uri encoding
  * changed: Per-recipient and per-domain email format
    preferences removed; Sending options moved to Compose
    Settings
  * changed: Thunderbird can now be used without setting up a
    mail account
  * changed: NNTP account set up moved to its own wizard; "Other
    accounts" wizard removed
  * changed: Account Manager UI updated
  * changed: Email account provisioner moved to a tab
  * changed: Link to create a new email address in Account Setup
    now hidden if "Email address" contains a value
  * changed: Addon Search will no longer display addons that are
    incompatible
  * changed: Searching from the `Themes` page of Addon Manager
    will now limit search results to only include themes
  * changed: Additional fields for download limits, expiration,
    and password protection added to FileLink template
  * changed: FileLink will check the provider for sufficient
    space before uploading
  * changed: "PreferMailFormat" property removed from addressbook
  * changed: Address book contact data is now stored in the vCard
    format. The change isn't backwards-compatible; backups are
    stored in the profile directory.
  * changed: Default install directory for Thunderbird Beta
    changed to not conflict with release versions
  * changed: Tab icons updated
  * changed: Message Header toolbar buttons will not display a
    border when set to show icons only
  * changed: New message detection for non-INBOX IMAP folders
    improved
  * changed: New Javascript NNTP implementation enabled by
    default; Set `mailnews.nntp.jsmodule` to `false` to disable
  * changed: Preference for OTR encrypted conversation logging
    moved to Protocol settings
  * changed: Thunderbird will not try to use OTR Chat encryption
    if the protocol supports native encryption
  * changed: Invitations to IRC and XMPP chat rooms will now
    prompt the user if they would like to join
  * changed: Today Pane UI refreshed
  * changed: Thunderbird will not support "Secondly" or
    "Minutely" recurring calendar events
  * changed: Default action of `Edit` button in recurring event
    dialog changed to display submenu
  * changed: Support for importing and exporting calendars from
    Outlook CSV format was removed
  * changed: Thunderbird will now delay refreshing cached
    calendars at start-up
  * changed: Javascript Ical parser (ical.js) enabled by default
  * fixed: Opening "cid:" links failed
  * fixed: Message download progress was calculated incorrectly
  * fixed: `Ctrl+mouse wheel` did not zoom in the message source
    window
  * fixed: `Open message in containing folder` did not work for
    standalone windows
  * fixed: Multi-message view was not fully scrollable
  * fixed: Messages did not reload in all open windows after Junk
    status was changed
  * fixed: Detached attachments were opened from a temporary copy
    instead of the selected save location
  * fixed: IMAP folder subscription changes on servers using
    OAuth2 authentication were not reflected in folder pane until
    Thunderbird was restarted
  * fixed: Improved error reporting for external GnuPG
    configurations
  * fixed: Incorrect OpenPGP preferences were used for secondary
    identities
  * fixed: Adding an expiry date to an OpenPGP key that did not
    have one was not possible
  * fixed: UI showed old OpenPGP key expiry date after changing
    it
  * fixed: Importing large OpenPGP key files failed
  * fixed: OpenPGP "Repair Message" button did not work with some
    emails
  * fixed: Importing OpenPGP public keys without a blank line
    following the header failed
  * fixed: Dragging and dropping multiple email attachments
    between windows did not always copy all attachments
  * fixed: Attachment bar in message compose window was not
    keyboard accessible
  * fixed: Triggering recipient pill creation in the compose
    window incorrectly used the entire field as input
  * fixed: Compose notification bars were not easily accessible
    via keyboard
  * fixed: "Save message" confirmation dialog buttons were not
    navigable using arrow keys
  * fixed: Focus jumped in compose window when closing the
    contacts sidebar
  * fixed: Save dialog was incorrectly shown when closing empty
    composer windows
  * fixed: Incorrect access key used for `File-&gt;New-&gt;Message`
    menu item
  * fixed: Changing focus in the compose window with multiple
    recipient pills selected did not always deselect the pills
  * fixed: Sending a message with non-ascii characters in
    recipient local parts failed unexpectedly when the server did
    not support SMTPUTF8
  * fixed: LDAP Autoconfig could block Thunderbird startup
  * fixed: Improvements to the Import/Export feature
  * fixed: Configuring multiple SMTP accounts using the same
    server was not possible
  * fixed: `Empty Trash on Exit` did not work with IMAP accounts
    using OAuth2 authentication
  * fixed: IMAP server hostname changes were not reflected in
    `Folder Properties` dialog
  * fixed: Addons automatically updated when Thunderbird updated
    despite Addon updates being turned off
  * fixed: Message size calculations incorrectly included
    FileLink attachments
  * fixed: After converting a FileLink attachment back to an
    e-mail attachment, the privacy notification persisted
  * fixed: A failed FileLink provider change removed the
    attachment completely
  * fixed: Subscribing to CardDAV address books from Account
    Setup tab did not subscribe to all selected address books
  * fixed: Adding CardDAV address books failed if an addon-
    provided address book was present
  * fixed: Messages with Message-Id headers longer than 332
    characters could not be forwarded
  * fixed: SMTP send progress bar could trigger high CPU usage
    when the server connection failed
  * fixed: Improved POP server authentication detection during
    Account Setup
  * fixed: News folders did not display biff indicator
  * fixed: IMAP flag changes from another client were not seen
    after some inactivity
  * fixed: Recipients were not de-duplicated before sending,
    leading to sending errors
  * fixed: Chat conversations' context menu did not recognize
    links
  * fixed: Chat username splitting in the account wizard did not
    work after changing protocols
  * fixed: Removing obsolete proprietary chat accounts did not
    work
  * fixed: OTR encrypted chat did not work on FreeBSD
  * fixed: Event edit toolbar button was not disabled when an
    invitation was selected
  * fixed: Event view headers and content were not lined up
    consistently for RTL locales
  * fixed: Mini-month views did not properly update at midnight
  * fixed: Some labels in Calendar were displayed in multiple
    languages
  * fixed: Thunderbird permitted inline editing of read-only
    event titles
  * fixed: Calendar view reloaded when switching tabs
  * fixed: It was possible to create annual calendar events with
    invalid days
  * fixed: Detection of attached vCalendar files improved
  * fixed: Reminders for events created by another user could not
    be closed
  * fixed: MS Teams meeting event descriptions were unreadable
    when stored on Google Calendar
  * fixed: Adding a Google calendar with a non-gmail or
    googlemail e-mail address failed
  * fixed: Accepting a recurrence exception to an event accepted
    event associated with the original recurring event rather
    than the exception
  * fixed: Various security fixes
  MFSA 2022-26 (bsc#1200793)
  * CVE-2022-34479 (bmo#1745595)
    A popup window could be resized in a way to overlay the
    address bar with web content
  * CVE-2022-34470 (bmo#1765951)
    Use-after-free in nsSHistory
  * CVE-2022-34468 (bmo#1768537)
    CSP sandbox header without `allow-scripts` can be bypassed
    via retargeted javascript: URI
  * CVE-2022-2226 (bmo#1775441)
    An email with a mismatching OpenPGP signature date was
    accepted as valid
  * CVE-2022-34481 (bmo#1497246)
    Potential integer overflow in ReplaceElementsAt
  * CVE-2022-31744 (bmo#1757604)
    CSP bypass enabling stylesheet injection
  * CVE-2022-34472 (bmo#1770123)
    Unavailable PAC file resulted in OCSP requests being blocked
  * CVE-2022-34478 (bmo#1773717)
    Microsoft protocols can be attacked if a user accepts a
    prompt
  * CVE-2022-2200 (bmo#1771381)
    Undesired attributes could be set as part of prototype
    pollution
  * CVE-2022-34484 (bmo#1763634, bmo#1772651)
    Memory safety bugs fixed in Thunderbird 91.11 and Thunderbird
    102</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662033600">- Mozilla Thunderbird 102.2.1
  * new: Commandline argument to open Calendar at startup added
    (`-calendar`)
  * changed: Buttons to connect automatically discovered Address
    Books and Calendar during `Account Setup` now displayed
  * fixed: Compacting IMAP folders failed when "Just mark as
    deleted" was set
  * fixed: Message threading status and sort order was not
    transferred when applying column layout to other folders
  * fixed: Folder names with half-width Kana characters were
    displayed incorrectly
  * fixed: Digital signing of messages was not disabled after
    switching to an identity that could not sign
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored
  * fixed: Activity Manager didn't show "Get Messages" activity
    when "Leave messages on server" was turned off and no new
    messages were found
  * fixed: Mail quota color did not update properly for multiple
    accounts
  * fixed: Profile export failed if an expected file did not
    exist
  * fixed: `Check Spelling` dialog could exceed screen size when
    many dictionaries were available
  * fixed: Dragging a news message to the Desktop caused
    Thunderbird to hang when synchronized for offline use
  * fixed: `Remove All Expired Articles` was not displayed on
    expired NNTP messages
  * fixed: Sending messages to encrypted Matrix rooms failed in
    some cases
  * fixed: Adding a CalDAV calendar on BSD-based OS's failed due
    to DNS errors
  * fixed: Various visual and UX improvements
  * fixed: Various security fixes
  MFSA 2022-38 (bsc#1203007)
  * CVE-2022-3033 (bmo#1784838)
    Leaking of sensitive information when composing a response to
    an HTML email with a META refresh tag
  * CVE-2022-3032 (bmo#1783831)
    Remote content specified in an HTML document that was nested
    inside an iframe's srcdoc attribute was not blocked
  * CVE-2022-3034 (bmo#1745751)
    An iframe element in an HTML email could trigger a network
    request
  * CVE-2022-36059 (bmo#1787741)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack
- Mozilla Thunderbird 102.2
  * new: Config setting added to disable OpenPGP "encryption is
    possible" reminder: `mail.openpgp.remind_encryption_possible`
  * changed: Thunderbird on macOS will now prompt for Primary
    Password on startup if set
  * changed: Thunderbird will no longer offer to import OpenPGP
    keys that are incomplete
  * changed: Selecting or unselecting a dictionary in the
    `Spelling` compose toolbar button will no longer immediately
    close the menu; Making dictionary changes via the editor
    context menu will continue to close the context menu
  * changed: Contact address lines are now adjusted to appear in
    the expected order
  * changed: Custom1-4 fields restored to Address Book UI;
    existing data is preserved from pre-102 profiles
  * fixed: Thunderbird startup performance improvements
  * fixed: `ALT+&lt;numpad digits&gt;` keypress events were intercepted
    by the Spaces Toolbar, preventing special character entry on
    Windows
  * fixed: Searching on attachment status did not work in Message
    Search dialog
  * fixed: Repairing IMAP folders in Offline mode removed local
    copy of the folders
  * fixed: POP3 message download progress bar was not displayed
  * fixed: POP `Fetch headers only` mode did not work for some
    server configurations
  * fixed: POP accounts using GSSAPI or NTLM authentication were
    not able to log into the server
  * fixed: A TLS certificate override dialog for self-signed
    certificates was not shown for IMAP accounts
  * fixed: Saving attachments from newsgroups did not work
  * fixed: Setting contact type to "None" was not possible if a
    type was previously set
  * fixed: Editing a contact without Name fields populated filled
    in the email address into the name fields
  * fixed: Address book toolbar buttons were not keyboard
    accessible
  * fixed: Auto-detection of CalDAV and CardDAV via DNS records
    used server domain leading to failures
  * fixed: Various visual and theme improvements
  * fixed: Various security fixes
  MFSA 2022-36 (bsc#1202645)
  * CVE-2022-38472 (bmo#1769155)
    Address bar spoofing via XSLT error handling
  * CVE-2022-38473 (bmo#1771685)
    Cross-origin XSLT Documents would have inherited the parent's
    permissions
  * CVE-2022-38476 (bmo#1760998)
    Data race and potential use-after-free in PK11_ChangePW
  * CVE-2022-38477 (bmo#1760611, bmo#1770219, bmo#1771159,
    bmo#1773363)
    Memory safety bugs fixed in Thunderbird 102.2
  * CVE-2022-38478 (bmo#1770630, bmo#1776658)
    Memory safety bugs fixed in Thunderbird 102.2, and
    Thunderbird 91.13
- Mozilla Thunderbird 102.1.2
  * fixed: The fix for bug 1777765 (no POP download progress bar)
    was backed out from this release to address broken POP
    message download with `Fetch headers only` selected in
    Account Settings (bug 1783552).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1662638400">- Mozilla Thunderbird 102.2.2
  * changed: Setting added to change Calendar event double-click
    action to open `Edit Event` dialog rather than view only; Set
    `calendar.events.defaultActionEdit` to `true`.
  * fixed: Running `Compact Folders` on maildir folders caused a
    redownload of all messages in the folder
  * fixed: Accessing mail folders in profiles with many folders
    was slow
  * fixed: SMTP servers were not always properly initialized, and
    were not listed in `Account Settings`
  * fixed: APOP authentication unsupported when connecting to
    POP3 server
  * fixed: OpenPGP key discovery failed
  * fixed: POP accounts hosted by AOL were not able to
    authenticate using OAuth2
  * fixed: Unable to open context menu in newsgroups header for
    groups that are not subscribed</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666094400">- Mozilla Thunderbird 102.4.0
  * changed: Thunderbird will automatically detect and repair
    OpenPGP key storage corruption caused by using the profile
    import tool in Thunderbird 102 (bmo#1790610)
  * fixed: POP message download into a large folder (~13000
    messages) caused Thunderbird to temporarily freeze
    (bmo#1792675)
  * fixed: Forwarding messages with special characters in Subject
    failed on Windows (bmo#1782173)
  * fixed: Links for FileLink attachments were not added when
    attachment filename contained Unicode characters
    (bmo#1789589)
  * fixed: Address Book display pane continued to show contacts
    after deletion (bmo#1777808)
  * fixed: Printing address book did not include all contact
    details (bmo#1782076)
  * fixed: CardDAV contacts without a Name property did not save
    to Google Contacts (bmo#1792101)
  * fixed: "Publish Calendar" did not work (bmo#1794471)
  * fixed: Calendar database storage improvements (bmo#1792124)
  * fixed: Incorrectly handled error responses from CalDAV
    servers sometimes caused events to disappear from calendar
    (bmo#1792923)
  * fixed: Various visual and UX improvements (bmo#1776093,bmo#17
    80040,bmo#1780425,bmo#1792876,bmo#1792872,bmo#1793466,bmo#179
    3543)
  * fixed: Various security fixes
  MFSA 2022-46 (bsc#1204421)
  * CVE-2022-42927 (bmo#1789128)
    Same-origin policy violation could have leaked cross-origin
    URLs
  * CVE-2022-42928 (bmo#1791520)
    Memory Corruption in JS Engine
  * CVE-2022-42929 (bmo#1789439)
    Denial of Service via window.print
  * CVE-2022-42932 (bmo#1789729, bmo#1791363, bmo#1792041)
    Memory safety bugs fixed in Thunderbird 102.4
- Rebase mozilla-silence-no-return-type.patch to apply with fuzz=0
- Added mozilla-partial-revert-1768632.patch to fix build on i586
- Mozilla Thunderbird 102.3.3
  * new: Option added to show containing address book for a
    contact when using `All Address Books` in vertical mode
    (bmo#1778871)
  * changed: Thunderbird will try to use POP NTLM authentication
    even if not advertised by server (bmo#1793349)
  * changed: Task List and Today Pane sidebars will no longer
    load when not visible (bmo#1788549)
  * fixed: Sending a message while a recipient pill was being
    modified did not save changes (bmo#1779785)
  * fixed: Nickname column was not available in horizontal view
    of Address Book (bmo#1778000)
  * fixed: Multiline organization values were displayed across
    two columns in horizontal view of Address Book (bmo#1777780)
  * fixed: Contact vCard fields with multiple values such as
    Categories were truncated when saved (bmo#1792399)
  * fixed: ICS calendar files with a `FREEBUSY` property could
    not be imported (bmo#1783441)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
- Mozilla Thunderbird 102.3.2
  * changed: Thunderbird will try to use POP CRAM-MD5
    authentication even if not advertised by server (bmo#1789975)
  * fixed: Checking messages on POP3 accounts caused POP folder
    to lock if mail server was slow or non-responsive
    (bmo#1792451)
  * fixed: Newsgroups named with consecutive dots would not
    appear when refreshing list of newsgroups (bmo#1787789)
  * fixed: Sending news articles containing lines starting with
    dot were sometimes clipped (bmo#1787955)
  * fixed: CardDAV server sync silently failed if sync token
    expired (bmo#1791183)
  * fixed: Contacts from LDAP on macOS address books were not
    displayed (bmo#1791347)
  * fixed: Chat account input now accepts URIs for supported chat
    protocols (bmo#1776706)
  * fixed: Chat ScreenName field was not migrated to new address
    book (bmo#1789990)
  * fixed: Creating a New Event from the Today Pane used the
    currently selected day from the main calendar instead of from
    the Today Pane (bmo#1791203)
  * fixed: `New Event` button in Today Pane was incorrectly
    disabled sometimes (bmo#1792058)
  * fixed: Event reminder windows did not close after being
    dismissed or snoozed (bmo#1791228)
  * fixed: Improved performance of recurring event date
    calculation (bmo#1787677)
  * fixed: Quarterly calendar events on the last day of the month
    repeated one month early (bmo#1789362)
  * fixed: Thunderbird would hang if calendar event exceeded the
    year 2035 (bmo#1789999)
  * fixed: Whitespace in calendar events was incorrectly handled
    when upgrading from Thunderbird 91 to 102 (bmo#1790339)
  * fixed: Various visual and UX improvements (bmo#1755623,bmo#17
    83903,bmo#1785851,bmo#1786434,bmo#1787286,bmo#1788151,bmo#178
    9728,bmo#1790499)
- Mozilla Thunderbird 102.3.1
  * changed: Compose window encryption options now only appear
    for encryption technologies that have already been configured
    (bmo#1788988)
  * changed: Number of contacts in currently selected address
    book now displayed at bottom of Address Book list column
    (bmo#1745571)
  * fixed: Password prompt did not include server hostname for
    POP servers (bmo#1786920)
  * fixed: `Edit Contact` was missing from Contacts sidebar
    context menus (bmo#1771795)
  * fixed: Address Book contact lists cut off display of some
    characters, the result being unreadable (bmo#1780909)
  * fixed: Menu items for dark-themed alarm dialog were invisible
    on Windows 7 (bmo#1791738)
  * fixed: Various security fixes
  MFSA 2022-43 (bsc#1204411)
  * CVE-2022-39249 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack by malicious server administrators
  * CVE-2022-39250 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a device
    verification attack
  * CVE-2022-39251 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to an
    impersonation attack
  * CVE-2022-39236 (bmo#1791765)
    Matrix SDK bundled with Thunderbird vulnerable to a data
    corruption issue
- Mozilla Thunderbird 102.3
  * changed: Thunderbird will no longer attempt to import account
    passwords when importing from another Thunderbird profile in
    order to prevent profile corruption and permanent data loss.
    (bmo#1790605)
  * changed: Devtools performance profile will use Thunderbird
    presets instead of Web Developer presets (bmo#1785954)
  * fixed: Thunderbird startup performance improvements
    (bmo#1785967)
  * fixed: Saving email source and images failed
    (bmo#1777323,bmo#1778804)
  * fixed: Error message was shown repeatedly when temporary disk
    space was full (bmo#1788580)
  * fixed: Attaching OpenPGP keys without a set size to non-
    encrypted messages briefly displayed a size of zero bytes
    (bmo#1788952)
  * fixed: Global Search entry box initially contained
    "undefined" (bmo#1780963)
  * fixed: Delete from POP Server mail filter rule intermittently
    failed to trigger (bmo#1789418)
  * fixed: Connections to POP3 servers without UIDL support
    failed (bmo#1789314)
  * fixed: Pop accounts with "Fetch headers only" set downloaded
    complete messages if server did not advertise TOP capability
    (bmo#1789356)
  * fixed: "File -&gt; New -&gt; Address Book Contact" from Compose
    window did not work (bmo#1782418)
  * fixed: Attach "My vCard" option in compose window was not
    available (bmo#1787614)
  * fixed: Improved performance of matching a contact to an email
    address (bmo#1782725)
  * fixed: Address book only recognized a contact's first two
    email addresses (bmo#1777156)
  * fixed: Address book search and autocomplete failed if a
    contact vCard could not be parsed (bmo#1789793)
  * fixed: Downloading NNTP messages for offline use failed
    (bmo#1785773)
  * fixed: NNTP client became stuck when connecting to Public-
    Inbox servers (bmo#1786203)
  * fixed: Various visual and UX improvements
    (bmo#1782235,bmo#1787448,bmo#1788725,bmo#1790324)
  * fixed: Various security fixes
  * unresolved: No dedicated "Department" field in address book
    (bmo#1777780)
  MFSA 2022-42 (bsc#1203477)
  * CVE-2022-3266 (bmo#1767360)
    Out of bounds read when decoding H264
  * CVE-2022-40959 (bmo#1782211)
    Bypassing FeaturePolicy restrictions on transient pages
  * CVE-2022-40960 (bmo#1787633)
    Data-race when parsing non-UTF-8 URLs in threads
  * CVE-2022-40958 (bmo#1779993)
    Bypassing Secure Context restriction for cookies with __Host
    and __Secure prefix
  * CVE-2022-40956 (bmo#1770094)
    Content-Security-Policy base-uri bypass
  * CVE-2022-40957 (bmo#1777604)
    Incoherent instruction cache when building WASM on ARM64
  * CVE-2022-3155 (bmo#1789061)
    Attachment files saved to disk on macOS could be executed
    without warning
  * CVE-2022-40962 (bmo#1776655, bmo#1777574, bmo#1784835,
    bmo#1785109, bmo#1786502, bmo#1789440)
    Memory safety bugs fixed in Thunderbird 102.3</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667390400">- Mozilla Thunderbird 102.4.1
  * new: Thunderbird will now catch and report errors parsing
    vCards that contain incorrectly formatted dates (bmo#1793415)
  * fixed: Dynamic language switching did not update interface
    when switched to right-to-left languages (bmo#1794289)
  * fixed: Custom header data was discarded after messages were
    saved as draft and reopened (bmo#195716)
  * fixed: `-remote` command line argument did not work,
    affecting integration with various applications such as
    LibreOffice (bmo#1793323)
  * fixed: Messages received via some SMS-to-email services could
    not display images (bmo#1774805)
  * fixed: VCards with nickname field set could not be edited
    (bmo#1793877)
  * fixed: Some recurring events were missing from Agenda on
    first load (bmo#1771168)
  * fixed: Download requests for remote ICS calendars incorrectly
    set "Accept" header to text/xml (bmo#1793757)
  * fixed: Monthly events created on the 31st of a month with &lt;30
    days placed first occurrence 1-2 days after the beginning of
    the following month (bmo#1266797)
  * fixed: Various visual and UX improvements
    (bmo#1781437,bmo#1785314,bmo#1794139,bmo#1794155,bmo#1794399)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1667563200">- Mozilla Thunderbird 102.4.2
  * changed: "Address Book" button in Account Central will now
    create a CardDAV address book instead of a local address book
    (bmo#1793903)
  * fixed: Messages fetched from POP server in `Fetch headers
    only` mode disappeared when moved to different folder by
    filter action (bmo#1793374)
  * fixed: Thunderbird re-downloaded locally deleted messages
    from a POP server when "Leave messages on server" and "Until
    I delete them" were enabled (bmo#1796903)
  * fixed: Multiple password prompts for the same POP account
    could be displayed (bmo#1786920)
  * fixed: IMAP authentication failed on next startup if ImapMail
    folder was deleted by user (bmo#1793599)
  * fixed: Retrieving passwords for authenticated NNTP accounts
    could fail due to obsolete preferences in a users profile on
    every startup (bmo#1770594)
  * fixed: `Get Next n Messages` did not consistently fetch all
    messages requested from NNTP server (bmo#1794185)
  * fixed: `Get Messages` button unable to fetch messages from
    NNTP server if root folder not selected (bmo#1792362)
  * fixed: Thunderbird text branding did not always match locale
    of localized build (bmo#1786199)
  * fixed: Thunderbird installer and Thunderbird updater created
    Windows shortcuts with different names (bmo#1787264)
  * fixed: LDAP search filters unable to work with non-ASCII
    characters (bmo#1794306)
  * fixed: "Today" highlighting in Calendar Month view did not
    update after date change at midnight (bmo#1795176)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1668600000">- Mozilla Thunderbird 102.5
  * changed: `Ctrl+N` shortcut to create new contacts from
    address book restored (bmo#1751288)
  * fixed: Account Settings UI did not update to reflect default
    identity changes (bmo#1782646)
  * fixed: New POP mail notifications were incorrectly shown for
    messages marked by filters as read or junk (bmo#1787531)
  * fixed: Connecting to an IMAP server configured to use
    `PREAUTH` caused Thunderbird to hang (bmo#1798161)
  * fixed: Error responses received in greeting header from NNTP
    servers did not display error message (bmo#1792281)
  * fixed: News messages sent using "Send Later" failed to send
    after going back online (bmo#1794997)
  * fixed: "Download/Sync Now..." did not completely sync all
    newsgroups before going offline (bmo#1795547)
  * fixed: Username was missing from error dialog on failed login
    to news server (bmo#1796964)
  * fixed: Thunderbird can now fetch RSS channel feeds with
    incomplete channel URL (bmo#1794775)
  * fixed: Add-on "Contribute" button in Add-ons Manager did not
    work (bmo#1795751)
  * fixed: Help text for `/part` Matrix command was incorrect
    (bmo#1795578)
  * fixed: Invite Attendees dialog did not fetch free/busy info
    for attendees with encoded characters in their name
    (bmo#1797927)
  * fixed: Various security fixes
  MFSA 2022-49 (bsc#1205270)
  * CVE-2022-45403 (bmo#1762078)
    Service Workers might have learned size of cross-origin media
    files
  * CVE-2022-45404 (bmo#1790815)
    Fullscreen notification bypass
  * CVE-2022-45405 (bmo#1791314)
    Use-after-free in InputStream implementation
  * CVE-2022-45406 (bmo#1791975)
    Use-after-free of a JavaScript Realm
  * CVE-2022-45408 (bmo#1793829)
    Fullscreen notification bypass via windowName
  * CVE-2022-45409 (bmo#1796901)
    Use-after-free in Garbage Collection
  * CVE-2022-45410 (bmo#1658869)
    ServiceWorker-intercepted requests bypassed SameSite cookie
    policy
  * CVE-2022-45411 (bmo#1790311)
    Cross-Site Tracing was possible via non-standard override
    headers
  * CVE-2022-45412 (bmo#1791029)
    Symlinks may resolve to partially uninitialized buffers
  * CVE-2022-45416 (bmo#1793676)
    Keystroke Side-Channel Leakage
  * CVE-2022-45418 (bmo#1795815)
    Custom mouse cursor could have been drawn over browser UI
  * CVE-2022-45420 (bmo#1792643)
    Iframe contents could be rendered outside the iframe
  * CVE-2022-45421 (bmo#1767920, bmo#1789808, bmo#1794061)
    Memory safety bugs fixed in Thunderbird 102.5</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Mozilla Thunderbird 102.5.1
  * changed: Mail extension API updates. See Mail Extension API
    Docs.
  * fixed: "Copy to &lt;folder&gt; again" menu item was not present
    after copying message to folder with Unicode name on Unicode-
    enabled IMAP server (bmo#1798172)
  * fixed: Calendar date picker was displayed behind "Send Later"
    window (bmo#1791537)
  * fixed: Various security fixes
  MFSA 2022-50 (bsc#1205941)
  * CVE-2022-45414 (bmo#1788096)
    Quoting from an HTML email with certain tags will trigger
    network requests and load remote content, regardless of a
    configuration to block remote content</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1670932800">- Mozilla Thunderbird 102.6
  * fixed: Importing secret OpenPGP keys failed when public key
    with public subkey was already present (bmo#1795698)
  * fixed: Message index files were incorrectly deleted when too
    many folders were opened (bmo#1787609)
  * fixed: Thunderbird sometimes incorrectly formatted synced
    vCards (bmo#1792542)
  * fixed: Recurring events did not display past a certain number
    of repetitions (bmo#1789437)
  * fixed: Cookies deleted from the "Show Cookies" dialog were
    not actually deleted (bmo#1803795)
  * fixed: Paused RSS feeds did not actually pause updates
    (bmo#1789120)
  * fixed: Various visual and UX improvements
    (bmo#1800189,bmo#1800537,bmo#1801080)
  MFSA 2022-52 (bsc#1206242)
  * CVE-2022-46880 (bmo#1749292)
    Use-after-free in WebGL
  * CVE-2022-46872 (bmo#1799156)
    Arbitrary file read from a compromised content process
  * CVE-2022-46881 (bmo#1770930)
    Memory corruption in WebGL
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions
  * CVE-2022-46875 (bmo#1786188)
    Download Protections were bypassed by .atloc and .ftploc
    files on Mac OS
  * CVE-2022-46882 (bmo#1789371)
    Use-after-free in WebGL
  * CVE-2022-46878 (bmo#1782219, bmo#1797370, bmo#1797685,
    bmo#1801102, bmo#1801315, bmo#1802395)
    Memory safety bugs fixed in Thunderbird 102.6</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1671796800">- Mozilla Thunderbird 102.6.1
  * fixed: Remote content did not load in user-defined signatures
    (bmo#1803942)
  * fixed: Addons that added new action buttons were not shown
    for addon upgrades, requiring removal and reinstall
    (bmo#1793430)
  * fixed: Various stability improvements
    (bmo#1798181,bmo#1797616)
  * fixed: Security fix
  MFSA 2022-53 (bsc#1206653)
  * CVE-2022-46874 (bmo#1746139)
    Drag and Dropped Filenames could have been truncated to
    malicious extensions</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1674216000">- Mozilla Thunderbird 102.7.1
  * fixed: Microsoft Office 365 accounts were unable to
    authenticate (bmo#1810760)
  * fixed: Switching identities caused remote images in HTML
    signatures to not be shown (bmo#1807200)
  * fixed: Thunderbird failed to import vCards that contained
    "\r\r\n" line endings (bmo#1800305)
  * fixed: Contribution button for add-ons opened Contribution
    page in a Thunderbird tab, instead of the external browser
    (bmo#1805808)
  * fixed: XMPP did not respond to unrecognized IQ queries,
    causing some servers to close the connection (bmo#1806630)
  * fixed: Window titlebar buttons (minimize/maximize/close) were
    not displayed in Windows 10 "Dark" color mode (bmo#1810961)
  * fixed: Various security fixes
  MFSA 2023-04 (bsc#1207119)
  * CVE-2023-0430 (bmo#1769000)
    Revocation status of S/Mime signature certificates was not
    checked
- Mozilla Thunderbird 102.7
  * new: Enterprise policies now support Thunderbird-specific
    preferences (bmo#1791637)
  * fixed: Localized builds and langpacks now use "comm-l10n"
    repository; downstream builds using official langpacks should
    not need to make changes
    (bmo#1765629,bmo#1766080,bmo#1801150,bmo#1807161)
  * fixed: Having too many folders open at startup caused loss of
    MSF files (bmo#1800202)
  * fixed: Copying an email from one local folder to another
    local folder sometimes caused "Another Operation is using the
    folder" error on Windows 7 (bmo#1792071)
  * fixed: Email address pill allowed for incorrectly formatted
    email addresses (bmo#1799390)
  * fixed: Creating security exceptions for messages sent using a
    self-signed certificate failed if hostname contained
    uppercase letters (bmo#1735803)
  * fixed: S/MIME certificate verification was prohibitively slow
    (bmo#1791130)
  * fixed: OpenPGP key import failed for key blocks with comments
    that contain Unicode characters (bmo#1721668)
  * fixed: Chat conversation sidebar was too wide under certain
    circumstances, making scrollbar unusable (bmo#1801645)
  * fixed: On Mac, deleting events from Today Pane with
    "Backspace" key deleted selected messages instead
    (bmo#1763468)
  * fixed: Various security fixes
  * unresolved: OAuth2 authentication not working for Microsoft
    365 Enterprise accounts. See the Blog post for additional information.
    (bmo#1810760)
  MFSA 2023-03 (bsc#1207119)
  * CVE-2022-46871 (bmo#1795697)
    libusrsctp library out of date
  * CVE-2023-23598 (bmo#1800425)
    Arbitrary file read from GTK drag and drop on Linux
  * CVE-2023-23599 (bmo#1777800)
    Malicious command could be hidden in devtools output on
    Windows
  * CVE-2023-23601 (bmo#1794268)
    URL being dragged from cross-origin iframe into same tab
    triggers navigation
  * CVE-2023-23602 (bmo#1800890)
    Content Security Policy wasn't being correctly applied to
    WebSockets in WebWorkers
  * CVE-2022-46877 (bmo#1795139)
    Fullscreen notification bypass
  * CVE-2023-23603 (bmo#1800832)
    Calls to &lt;code&gt;console.log&lt;/code&gt; allowed bypasing Content
    Security Policy via format directive
  * CVE-2023-23605 (bmo#1764921, bmo#1802690, bmo#1806974)
    Memory safety bugs fixed in Thunderbird 102.7</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1675857600">- Mozilla Thunderbird 102.7.2
  * fixed: Various crash fixes (bmo#1806245,bmo#1806247)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676548800">- Mozilla Thunderbird 102.8.0
  * new: Added option to build RNP library with OpenSSL backend
    (use "--with-librnp-backend=openssl" configure option)
    (bmo#1799123,bmo#1805215)
  * changed: Thunderbird now warns user that OpenPGP is disabled
    if RNP library is outdated or missing (bmo#1799874)
  * fixed: "Get Messages" did not retrieve messages from Gmail
    accounts using a local folder as a deferred inbox
    (bmo#1799106)
  * fixed: Various visual and UX improvements
    (bmo#1777788,bmo#1790278)
  * unresolved: Source strings for localized builds not uploaded
    to FTP as expected (bmo#1817086)
  * fixed: Various security fixes
  MFSA 2023-07 (bsc#1208144)
  * CVE-2023-0616 (bmo#1806507)
    User Interface lockup with messages combining S/MIME and
    OpenPGP
  * CVE-2023-25728 (bmo#1790345)
    Content security policy leak in violation reports using
    iframes
  * CVE-2023-25730 (bmo#1794622)
    Screen hijack via browser fullscreen mode
  * CVE-2023-0767 (bmo#1804640)
    Arbitrary memory write via PKCS 12 in NSS
  * CVE-2023-25735 (bmo#1810711)
    Potential use-after-free from compartment mismatch in
    SpiderMonkey
  * CVE-2023-25737 (bmo#1811464)
    Invalid downcast in SVGUtils::SetupStrokeGeometry
  * CVE-2023-25738 (bmo#1811852)
    Printing on Windows could potentially crash Thunderbird with
    some device drivers
  * CVE-2023-25739 (bmo#1811939)
    Use-after-free in
    mozilla::dom::ScriptLoadContext::~ScriptLoadContext
  * CVE-2023-25729 (bmo#1792138)
    Extensions could have opened external schemes without user
    knowledge
  * CVE-2023-25732 (bmo#1804564)
    Out of bounds memory write from EncodeInputStream
  * CVE-2023-25734 (bmo#1784451, bmo#1809923, bmo#1810143,
    bmo#1812338)
    Opening local .url files could cause unexpected network loads
  * CVE-2023-25742 (bmo#1813424)
    Web Crypto ImportKey crashes tab
  * CVE-2023-25746 (bmo#1544127, bmo#1762368, bmo#1789449,
    bmo#1803628, bmo#1810536)
    Memory safety bugs fixed in Thunderbird 102.8</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1679313600">- Mozilla Thunderbird 102.9
  * fixed: Notification about a sender's changed OpenPGP key was
    not immediately visible (bmo#1814003)
  * fixed: TLS Certificate Override dialog did not appear when
    retrieving messages via IMAP using "Get Messages" context
    menu (bmo#1816596)
  * fixed: Spellcheck dictionaries were missing from localized
    Thunderbird builds that should have included them
    (bmo#1818257)
  * fixed: Tooltips for "Show/Hide" calendar toggle did not
    display (bmo#1809557)
  * fixed: Various security fixes
  MFSA 2023-11 (bsc#1209173)
  * CVE-2023-25751 (bmo#1814899)
    Incorrect code generation during JIT compilation
  * CVE-2023-28164 (bmo#1809122)
    URL being dragged from a removed cross-origin iframe into the
    same tab triggered navigation
  * CVE-2023-28162 (bmo#1811327)
    Invalid downcast in Worklets
  * CVE-2023-25752 (bmo#1811627)
    Potential out-of-bounds when accessing throttled streams
  * CVE-2023-28163 (bmo#1817768)
    Windows Save As dialog resolved environment variables
  * CVE-2023-28176 (bmo#1808352, bmo#1811637, bmo#1815904,
    bmo#1817442, bmo#1818674)
    Memory safety bugs fixed in Thunderbird 102.9</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1680177600">- Mozilla Thunderbird 102.9.1
  * fixed: Thunderbird was unable to open file URLs from command
    line (URLs beginning with "file://") (bmo#1816343)
  * fixed: Source strings for localized builds not uploaded to
    FTP as expected (bmo#1817086)
  * fixed: Visual and theme improvements
    (bmo#1821358,bmo#1822286)
  * fixed: Security fixes
  MFSA 2023-12 (bsc#1209953)
  * CVE-2023-28427 (bmo#1822595)
    Matrix SDK bundled with Thunderbird vulnerable to denial-of-
    service attack</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1682510400">- Mozilla Thunderbird 102.10.1
  * fixed: Messages with missing or corrupt "From:" header did
    not display message header buttons (bmo#1793918)
  * fixed: Composer repeatedly prompted for S/MIME smartcard
    signing/encryption password (bmo#1828366)
  * fixed: Address Book integration did not work with macOS 11.4
    Bug Sur (bmo#1720257)
  * fixed: Mexico City DST fix in Thunderbird 102.10.0 (bug
    1826146) was incomplete (bmo#1827503)
- Mozilla Thunderbird 102.10
  * changed: New messages will automatically select S/MIME if
    configured and OpenPGP is not (bmo#1793278)
  * fixed: Calendar events with timezone America/Mexico_City
    incorrectly applied Daylight Savings Time (bmo#1826146)
  * fixed: Security fixes
  MFSA 2023-15 (bsc#1210212)
  * CVE-2023-29531 (bmo#1794292)
    Out-of-bound memory access in WebGL on macOS
  * CVE-2023-29532 (bmo#1806394)
    Mozilla Maintenance Service Write-lock bypass
  * CVE-2023-29533 (bmo#1798219, bmo#1814597)
    Fullscreen notification obscured
  * CVE-2023-1999 (bmo#1819244)
    Double-free in libwebp
  * CVE-2023-29535 (bmo#1820543)
    Potential Memory Corruption following Garbage Collector
    compaction
  * CVE-2023-29536 (bmo#1821959)
    Invalid free from JavaScript code
  * CVE-2023-0547 (bmo#1811298)
    Revocation status of S/Mime recipient certificates was not
    checked
  * CVE-2023-29479 (bmo#1824978)
    Hang when processing certain OpenPGP messages
  * CVE-2023-29539 (bmo#1784348)
    Content-Disposition filename truncation leads to Reflected
    File Download
  * CVE-2023-29541 (bmo#1810191)
    Files with malicious extensions could have been downloaded
    unsafely on Linux
  * CVE-2023-29542 (bmo#1810793, bmo#1815062)
    Bypass of file download extension restrictions
  * CVE-2023-29545 (bmo#1823077)
    Windows Save As dialog resolved environment variables
  * CVE-2023-1945 (bmo#1777588)
    Memory Corruption in Safe Browsing Code
  * CVE-2023-29548 (bmo#1822754)
    Incorrect optimization result on ARM64
  * CVE-2023-29550 (bmo#1720594, bmo#1751945, bmo#1812498,
    bmo#1814217, bmo#1818357, bmo#1818762, bmo#1819493,
    bmo#1820389, bmo#1820602, bmo#1821448, bmo#1822413,
    bmo#1824828)
    Memory safety bugs fixed in Thunderbird 102.10</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1683806400">- Mozilla Thunderbird 102.11
  * fixed: During Account Setup, the "Checking password..."
    message was not removed after a failure (bmo#1826022)
  * fixed: Miscellaneous UI fixes (bmo#1827070)
  * fixed: Security fixes
  MFSA 2023-18 (bsc#1211175)
  * CVE-2023-32205 (bmo#1753339, bmo#1753341)
    Browser prompts could have been obscured by popups
  * CVE-2023-32206 (bmo#1824892)
    Crash in RLBox Expat driver
  * CVE-2023-32207 (bmo#1826116)
    Potential permissions request bypass via clickjacking
  * CVE-2023-32211 (bmo#1823379)
    Content process crash due to invalid wasm code
  * CVE-2023-32212 (bmo#1826622)
    Potential spoof due to obscured address bar
  * CVE-2023-32213 (bmo#1826666)
    Potential memory corruption in FileReader::DoReadData()
  * CVE-2023-32214 (bmo#1828716)
    Potential DoS via exposed protocol handlers
  * CVE-2023-32215 (bmo#1540883, bmo#1751943, bmo#1814856,
    bmo#1820210, bmo#1821480, bmo#1827019, bmo#1827024,
    bmo#1827144, bmo#1827359, bmo#1830186)
    Memory safety bugs fixed in Thunderbird 102.11</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1685448000">- Mozilla Thunderbird 102.11.2
  * fixed: Thunderbird 102.11.1 contained POP3 client regressions
    with offline mode and TLS certificate overrides
    (bmo#1801286,bmo#1816596,bmo#1798785)
- Mozilla Thunderbird 102.11.1
  * fixed: POP message retrieval stopped after a network error
    occurred and connectivity was restored (bmo#1798785)
  * fixed: Reused SMTP connections sometimes silently
    disconnected, causing timeouts (bmo#1766382)
  * fixed: Thunderbird could freeze if saving a sent message to
    IMAP failed (bmo#1745130)
  * fixed: Creating OpenPGP keys with no expiration was not
    possible (bmo#1830094)
  * fixed: News reader did not always issue GROUP command after
    authentication with remote server, preventing Thundebird from
    displaying or refreshing news from the server (bmo#1824377)
- Update keyring</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1686571200">- Mozilla Thunderbird 102.12
  * fixed: "Searching the directory for recipients certificates"
    popup could block compose window when "S/MIME reminder" was
    enabled and using an LDAP address book (bmo#1833651)
  * fixed: Some elements still used animations with "prefers-
    reduced-motion" set (bmo#1833353)
  * fixed: Visual and theme improvements
    (bmo#1832943,bmo#1832990)
  * fixed: Security fixes
  MFSA 2023-21 (bsc#1211922)
  * CVE-2023-34414 (bmo#1695986)
    Click-jacking certificate exceptions through rendering lag
  * CVE-2023-34416 (bmo#1752703, bmo#1818394, bmo#1826875,
    bmo#1827340, bmo#1827655, bmo#1828065, bmo#1830190,
    bmo#1830206, bmo#1830795, bmo#1833339)
    Memory safety bugs fixed in Thunderbird 102.12</changelog>
</package>
<package pkgid="5fedb02dc61c4681c36029717c8d4498053b768562b043a94b5fee2553785ef8" name="WebKit2GTK-4.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="03cdbabe0ae2444252ce0b42fe3ab41286af4341b100194734930291717fe092" name="WebKit2GTK-4.1-lang" arch="noarch">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="5c584baaff5c7a90f4e553fbd7637a513f01d1e245028c770de36579fdff467b" name="WebKit2GTK-5.0-lang" arch="noarch">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="8e26c65cbaefb20c8fbbede79a3ec83124649622b3004b19aa052876324ac3fe" name="amazon-ecs-init" arch="aarch64">
  <version epoch="0" ver="1.53.0" rel="150100.4.15.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="d258ac5eac4917e60ab228ae77ff808f511aafed3efa64ba67a3a668d3641c43" name="amazon-ecs-init" arch="src">
  <version epoch="0" ver="1.53.0" rel="150100.4.15.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="0e8fdc822306ada884160b6cfffedf53f03b252780b100b775982001f5b70ea6" name="amazon-ecs-init" arch="x86_64">
  <version epoch="0" ver="1.53.0" rel="150100.4.15.1"/>
  <changelog author="rjschwei@suse.com" date="1443096000">- Rename the service file, request from upstream
- Spec file improvements to better match the requirements of the code</changelog>
  <changelog author="rjschwei@suse.com" date="1443096001">- Drop the extra version number
  + Going forward we do not care about picking up -x tarball releases
    the do not contain source changes</changelog>
  <changelog author="rjschwei@suse.com" date="1443355200">- Add patch cgroup_location.patch
  + Modify location where the agent looks for cgroup information</changelog>
  <changelog author="rjschwei@suse.com" date="1443441600">- Update long description</changelog>
  <changelog author="rjschwei@suse.com" date="1444305600">- Update to version 1.5.0 (bsc#949602)
  + Enhancement - Cache Agent version 1.5.0
  + Enhancement - Improved merge strategy for user-supplied environment
  + Enhancement - Add default supported logging drivers
- Add build switch for SUSE, modify cgroup_location.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1453896000">- Update to version 1.7.1 (bsc#963837)
  + remove cgroup_location.patch, system path is integrated in build
    configuration
  + Cache Agent version 1.7.1
- From 1.7.0
  + Cache Agent version 1.7.0
  + Add support for Docker 1.9.1
- From 1.6.0
  + Cache Agent version 1.6.0
  + Updated source dependencies</changelog>
  <changelog author="rjschwei@suse.com" date="1478174400">- Update to version 1.13.0 (bsc#1008298)
  + Cache agent version 1.13.0
- From 1.12.2
  + Cache Agent version 1.12.2
- From 1.12.1
  + Cache Agent version 1.12.1
- From 1.12.0
  + Enable Task IAM Role for containers launched with 'host' network mode
  + Cache Agent version 1.12.0
- From 1.11.1
  + Cache Agent version 1.11.1
- From 1.11.0
  + Enhancement - Support Task IAM Roles feature of Agent
  + Enhancement - Start Agent with host network mode
  + Enhancement - Cache Agent version 1.11.0
  + Enhancement - Add support for Docker 1.11.2
- From 1.10.0
  + Enhancement - Cache Agent version 1.10.0
  + Enhancement - Add support for Docker 1.11.1
- From 1.9.0
  + Enhancement - Cache Agent version 1.9.0
  - From 1.8.2
  + Enhancement - Cache Agent version 1.8.2
- From 1.8.1
  + Enhancement - Cache Agent version 1.8.1</changelog>
  <changelog author="rjschwei@suse.com" date="1478174401">- Service needs to run after we know the network is fully configured
  thus use network-online.target instead of network.target</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Update to version 1.17.3
  + No upstream changelog</changelog>
  <changelog author="rjschwei@suse.com" date="1527249600">- Modify dependencies to work around module dependency issues in SLE</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1531828800">- Update to version 1.18.0
  + Cache Agent version 1.18.0
  + Add support for regional buckets
  + Bundle ECS Agent tarball in package
  + Download agent based on the partition
  + Mount Docker plugin files dir</changelog>
  <changelog author="bwiedemann@suse.com" date="1535630400">- Add reproducible.patch to use constant build path (boo#1062303)</changelog>
  <changelog author="rjschwei@suse.com" date="1554292800">- Enable aarch64 build (bsc#1131459)</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="rjschwei@suse.com" date="1613476800">- Update to version 1.50.1 (bsc#1182343, bsc#1182344)
  + Cache Agent version 1.50.1
  + Does not restart ECS Agent when it exits with exit code 5
- For detailed changes between the previous version and this version see
  the included Changelog.md file</changelog>
  <changelog author="rjschwei@suse.com" date="1614340800">- Only build for x86_64 and aarch64</changelog>
  <changelog author="rjschwei@suse.com" date="1615809600">- Add info about bundled dependencies in spec
- Fix required go version
- Handle go 1.16 or later by switching GO111MODULE to previous default</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 1.52.1 (bsc#1186239, bsc#1186262)
  + Cache Agent version 1.52.1
  + Add support for ECS EXTERNAL launch type (ECS Anywhere)</changelog>
  <changelog author="rjschwei@suse.com" date="1622030400">- Add use-agent-container-built-in-certs.patch to use the built in certs from
  the downloaded agent container
- Update amazon-ecs.service to consider the proper environment files
- Set the cache state to ensure the latest agent container gets pulled</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624449600">- Update to version 1.53.0-1 (bsc#1187661, bsc#1187662)
  * Cache Agent version 1.53.0
- from version 1.52.2-2
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: fix incorrect download url when running in cn region
- from version 1.52.2-1
  * Cache Agent version 1.52.2
  * ecs-anywhere-install: remove dependency on gpg key server
  * ecs-anywhere-install: allow sandboxed apt installations</changelog>
</package>
<package pkgid="ad01fa649cc17979282501692f29d1a275dea4a0484ca402bf452b768977df81" name="amazon-ssm-agent" arch="aarch64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.15.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    “CommandWorkerLimit” attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="5e6c8ba27a75dc51318c6ade02eda2cedf326ce9b360d816e00d1588713ce757" name="amazon-ssm-agent" arch="src">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.15.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    “CommandWorkerLimit” attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="740d2f8171a1c67abc75a17da0d1abe84bb265e07f639f327c43bb08c0427296" name="amazon-ssm-agent" arch="x86_64">
  <version epoch="0" ver="3.1.1260.0" rel="150000.5.15.1"/>
  <changelog author="sean.marlow@suse.com" date="1481889600">- Initial package 1.2.290.0 2016-07-20</changelog>
  <changelog author="sean.marlow@suse.com" date="1484827200">- Update to 2.0.663.0 2017-01-18
  - Added support for aws:softwareInventory plugin to upload
    inventory related log messages to S3
  - Added support for running Powershell on Linux
  - Added support for State Manager that automates the process of
    keeping your Amazon EC2 and hybrid infrastructure in a state that
    you define You can use State Manager to ensure that your instances
    are bootstrapped with specific software at startup, configured
    according to your security policy, joined to a Windows domain,
    or patched with specific software updates throughout their
    lifecycle
  - Added support for Systems Manager Inventory that allows you to
    specify the type of metadata to collect, the instances from
    where the metadata should be collected, and a schedule for
    metadata collection
  - Added support for installing, uninstalling, and updating AWS
    packages published by AWS
  - Added support for installing Docker on Windows and running
    Docker actions
  - Added support for Windows Server 2016
  - Added support for Windows Server Nano
  - Fixed CloudWatch crash issue
  - Fixed Domain Join to support customized OU
  - Fixed CloudWatch doesn't work with creating association from
    Console
  - Fixed SSM Agent not able to start on Windows Server 2003
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1487332800">- Update to 2.0.672.0 2017-02-17
  - Added bucket-owner-full-control ACL to S3 outputs to support
    cross-account upload
  - Standardized S3 result paths across plugins; commands append
    command-id/instance-id/plugin-name/step-id associations append
    instance-id/association-id/execution-date/plugin-name/step-id
  - step-id is the id field in plugin input if present and
    supported, otherwise the step name (in 2.0 schema documents),
    otherwise the plugin-name again
  - plugin-name and step-id have : characters removed
  - FreeBSD patches from external contributor
  - Various bug fixes</changelog>
  <changelog author="lchiquitto@suse.de" date="1488369600">- Add package to SLE-12 codestream (bsc#1017899, fate#322303)</changelog>
  <changelog author="sean.marlow@suse.com" date="1496232000">- Update to 2.0.790.0 2017-05-31 (bsc#1047581)
  - Added support for step-level preconditions
  - Added support for rate/interval based schedule expressions for
    associations
  - Added Summary and PackageID fields to inventory's
    aws:application gatherer
  - Changed inventory's aws:application gatherer to use
    win32_processor: addressWidth to detect OS architecture to
    avoid localization based errors
  - Fixed CloudWatch issue with large configuration
  - Fixed S3 upload when instance and bucket are not in the same
    region
  - Fixed bug that prevented native language AMIs (Japanese AMI)
    from launching Cloudwatch
  - Various bug fixes
- Update to 2.0.767.0 2017-05-31
  - Returning longer StandardOutput and StandardError from
    RunShellScript and RunPowerShellScript which show up in the
    results of GetCommandInvocation and the detailed output of
    ListCommandInvocation
  - Added Document v2.0 support for Run Command, which includes
    support for multiple actions of same plugin type
  - Various bug fixes
- Update to 2.0.755.0 2017-05-31
  - Fixed bugs that prevented CloudWatch from launching and allowed
    multiple instances of CloudWatch to launch on Windows
  - Various bug fixes
- Update to 2.0.730.0 2017-05-31
  - Fixed issues with agent starting before network is ready on
    systemd systems.
- Update to 2.0.716.0 2017-05-31
  - Pass proxy settings to domain join and CloudWatch
  - Added support for installing Docker on Linux
  - Removed the upper limit for the maximum number of parallel
    executing documents on the agent (previously the max was 10)
  - You can configure this number by setting the
    “CommandWorkerLimit” attribute in amazon-ssm-agent.json file
  - Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1503662400">- Add ssm-cli to package.
- Remove requirement on lsb-release. Agent now parses os-release
  by default.
- Use gzip archive from GitHub instead of converting to xz.
- Update to 2.0.922.0 2017-08-14 (bsc#1055766)
  + Added Raspbian support for armv6 to support Raspberry Pi
  + Various bug fixes
- Update to 2.0.913.0 2017-08-07
  + Updated golang/sys dependency to the latest
  + Increased run command document maximum execution timeout to 48 hours
  + Various bug fixes
- Update to 2.0.902.0 2017-07-31
  + Added support for uploading agent logs to CloudWatch for SSM Agent diagnostics
  + Added additional gatherers for inventory
  + Added configuration compliance support for association
  + Various bug fixes
- Update to 2.0.879.0 2017-07-26
  + Add capability to configure custom s3 endpoint for the agent
  + Various bug fixes
- Update to 2.0.847.0 2017-07-03
  + Various bug fixes
- Update to 2.0.842.0 2017-06-26
  + Added rollback support in aws:configurePackage
  + Various bug fixes
- Update to 2.0.834.0 2017-06-23
  + Various bug fixes
- Update to 2.0.805.0 2017-06-07
  + Added support for SLES (SUSE) (64-bit, v12 and above)
  + Various bug fixes
- Update to 2.0.796.0 2017-05-29
  + Linux platform version now based on os-release when available
  + Various bug fixes</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142400">- Update to 2.2.45.0 2017-10-18 (bsc#1067256)
  + Refresh version patch with new version.
  + Adding versioning support for Parameter Store.
  + Added additional gatherers for inventory, including windows
    service gatherer, windows registry gatherer, file metadata
    gatherer, windows role gatherer.
  + Added support for aws:downloadContent plugin to download
    content from GitHub, S3 and documents from SSM documents.
  + Added support for aws:runDocument plugin to execute SSM
    documents.
- Update to 2.2.30.0 2017-10-09
  + Improved speed of initial association application on boot
  + Various aws:configurePackage service integration changes
  + Improved home directory detection in non-x64 linux platforms
    to address cases where shared AWS SDK credentials were not
    available in on-prem instances
- Update to 2.2.24.0 2017-10-02
  + Added exponential backoff in bucket region check for s3 upload
  + Fixed an issue with orchestration directory cleanup for
    RunCommand
- Update to 2.2.16.0 2017-09-25
- Update to 2.1.4.0 2017-09-11
  + Support for command execution out-of-process
- Update to 2.0.952.0 2017-08-28</changelog>
  <changelog author="sean.marlow@suse.com" date="1510142401">- Add ssm-document-worker binary to agent package.</changelog>
  <changelog author="sean.marlow@suse.com" date="1511784000">- Update Go version requirement to 1.7.4.</changelog>
  <changelog author="ro@suse.de" date="1517486400">- do not build on s390, only on s390x (no go on s390)</changelog>
  <changelog author="sean.marlow@suse.com" date="1521028800">- Update to 2.2.325.0 2018-03-07 (bsc#1085670)
  + Bug fix to change sourceHashType to be default sha256 on
    psmodule.
- Update to 2.2.257.0 2018-02-23
  + Bug fix to address an issue that can prevent the agent from
    processing associations after a restart.
- Update to 2.2.160.0 2018-01-15
  + Execute "pwsh" on linux when using runPowershellScript plugin.
- Update to 2.2.93.0 2017-11-14
  + Update to latest AWS SDK.
- Update to 2.2.58.0 2017-10-23
  + Switching to use Birdwatcher distribution service for AWS
    packages.</changelog>
  <changelog author="sean.marlow@suse.com" date="1551873600">- Update version patch.
- Update to 2.3.415.0 (2019-03-05)
  + Bug fix addressing issues in Distributor package upgrade
- Update to 2.3.372.0 (2019-03-05)
  + Bug fix to allow installation of Distributor packages that do
    not have a version name.
  + Bug fix for agent crash with message "WaitGroup is reused
    before previous Wait has returned".
- Update to 2.3.344.0 (2019-03-05)
  + Add frequent collector to detect changed inventory types and
    upload it to SSM service between two scheduled collections.
  + Change AWS Systems Manager Distributor to reduce calls to
    GetDocument by calling DescribeDocument.
  + Add exit code when ssm-cli execution fails.
  + Create ssm-user only after the control channel has been
    successfully created.
- Update to 2.3.274.0 (2019-03-05)
  + Enabled AWS Systems Manager Distributor that lets you securely
    distribute and install software packages.
  + Add support for the arm64 architecture on Amazon Linux 2,
    Ubuntu 16.04/18.04, and RHEL 7.6 to support EC2 A1 instances.
- Update to 2.3.235.0 (2019-03-05)
  + Bug fix for session manager logging on Windows
  + Bug fix for ConfigureCloudWatch plugin
  + Bug fix for update SSM agent occasionally failing due to SSM
    agent service stuck in starting state
- Update to 2.3.193.0 (2019-03-05)
  + Bug fix for past sessions occasionally stuck in terminating
    state
  + Darwin masquerades as Linux to bypass OS validation on the
    backend until official support can be added
- Update to 2.3.169.0 (2019-03-05)
  + Update managed instance role token more frequently
- Update to 2.3.136.0 (2019-03-05)
  + Bug fix for issue that GatherInventory throw out error when
    there is no Windows Update in instance
  + Add more filters when getting the Windows event logs at
    startup to improve performance
  + Add random jitter before call PutInventory in inventory
    datauploader
- Update to 2.3.117.0 (2019-03-05)
  + Bug fix for issues during process termination on instances
    where IAM policy does not grant ssmmessages permissions.
- Update to 2.3.101.0 (2019-03-05)
  + Bug fix to prevent defunct processes when creating the local
    user ssm-user.
  + Bug fix for sudoersFile permission to avoid "sudo" command
    warnings in Session Manager.
  + Disable hibernation on Windows platform if Cloudwatch
    configuration is present.
- Update to 2.3.68.0 (2019-03-05)
  + Enables the Session Manager capability that lets you manage
    your Amazon EC2 instance through an interactive one-click
    browser-based shell or through the AWS CLI.
  + Beginning this agent version, SSM Agent will create a local
    user "ssm-user" and either add it to /etc/sudoers (Linux) or
    to the Administrators group (Windows) every time the agent
    starts. The ssm-user is the default OS user when a Session
    Manager session is started, and the password for this user is
    reset on every session. You can change the permissions by
    moving the ssm-user to a less-privileged group or by changing
    the sudoers file. The ssm-user is not removed from the system
    when SSM Agent is uninstalled.
- Update to 2.3.13.0 (2019-03-05)
  + Bug fix for the SSM Agent service remaining in "Starting"
    state on Windows when unable to authenticate to the Systems
    Manager service.
- Update to 2.2.916.0 (2019-03-05)
  + Bug fix for missing cloudwatch.exe seen in SSM Agent version
    2.2.902.0
- Update to 2.2.902.0 (2019-03-05)
  + Initial support for developer builds on macOS
  + Retry sending Run Command execution results for up to 2 hours
  + More detailed error messages are returned for inventory plugin
    failures during State Manager association executions
- Update to 2.2.800.0 (2019-03-05)
  + Bug fix to clean the orchestration directory
  + Streaming AWS Systems Manager Run Command output to CloudWatch
    Logs
  + Reducing number of retries for serial port opening
  + Add retry logic to installation verification
- Update to 2.2.619.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.607.0 (2019-03-05)
  + Various bug fixes
- Update to 2.2.546.0 (2019-03-05)
  + Bug fix to retry sending document results if they couldn't
    reach the service
- Update to 2.2.493.0 (2019-03-05)
  + Added support for Ubuntu Snap packaging
  + Bug fix so that aws:downloadContent does not change permissions
    of directories
  + Bug fix to Cloudwatch plugin where StartType has duplicated
    Enabled value
- Update to 2.2.392.0 (2019-03-05)
  + Added support for agent hibernation so that Agent backs off or
    enters hibernation mode if it does not have access to the
    service
  + Various bug fixes
- Update to 2.2.355.0 (2019-03-05)
  + Fix S3Download to download from cross regions.
  + Various bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1588248000">- Update to 2.3.978.0 (2020-04-08) (bsc#1170744)
  + Stop pty on receiving TerminateSession request
  + Add support for Debian arm64 architecture
  + Refactoring session log generation logic
- Update to 2.3.930.0  (2020-03-17)
  + Bug fix for CloudWatch agent version showing twice in Inventory console
  + Bug fix for retrieving minor version for CentOS7
  + Add snap appData collection for inventory in ubuntu 18
  + Add validation for contents of os release files
  + Add retry for fingerprint generation
- Update to 2.3.871.0 (2020-02-20)
  + Various bug fix for SSM Agent
- Update to 2.3.842.0 (2020-01-29)
  + Bug fix for updating document state file prior agent reboot
  + Add support to restart agent after SIGPIPE exit status
- Update to 2.3.814.0 (2020-01-16)
  + Bug fix for metadata service V2
  + Update Golang version 1.12 for travis
  + Optimize session manager retry logic
- Update to 2.3.786.0 (2019-12-19)
  + Add support for Oracle Linux v7.5 and v7.7
  + Bug fix for Inventory data provider to support special characters
  + Bug fix for SSM MDS service name
- Update to 2.3.772.0 (2019-12-13)
  + Upgrade AWS SDK
  + Add logging for fingerprint generation
- Update to 2.3.760.0 (2019-11-15)
  + Session manager supports handling of Task metadata
- Update to 2.3.758.0 (2019-11-11)
  + Add support to update SSM Distributor packages in place
- Update to 2.3.756.0 (2019-11-05)
  + Terminate port forwarding session on receiving TerminateSession flag
  + Bug fix to reload SSM client if region has not been initialize correctly
  + Bug fix for retrieval of user groups on Linux
- Update to 2.3.722.0 (2019-10-11)
  + Bug fix for the delay when registering non-EC2 on-prem instances
  + Bug fix for missing ACL when uploading logs to S3 buckets
  + Upgrade GoLang version from 1.9 to 1.12
- Update to 2.3.714.0 (2019-09-26)
  + For port forwarding session, close server connection when client drops it's connection
  + Bug fix for missing condition of rules from inventory registry
  + Update service domain information fetch logic from EC2 Metadata
- Update to 2.3.707.0 (2019-09-11)
  + Bug fix for characters dropping from session manager shell output
  + Bug fix for session manager freezing caused by non utf8 character
  + Switch the request protocol order for getting S3 Header
  + Keep port forwarding session open until session is terminated
- Update to 2.3.701.0 (2019-08-21)
  + Send platform type information in controlChannel input
- Update to 2.3.687.0 (2019-08-05)
  + Bug fix for runPowershellScript plugin on linux platform
  + Add support for document 2.x version to ssm-cli
- Update to 2.3.680.0 (2019-07-24)
  + Added a new Inventory gatherer AWS:BillingInfo which will gather the billing product ids for LicenseIncluded and Marketplace instance
- Update to 2.3.672.0 (2019-07-09)
  + Add Port plugin for SSH/SCP
  + Add support for Session Manager RunAs functionality on Linux platform
- Update to 2.3.668.0 (2019-07-01)
  + Add Session Manager InteractiveCommands plugin
  + Bug fix for log formatting issue for session manager
- Update to 2.3.662.0 (2019-06-19)
  + Bug fix for Session Manager when handling line endings on Windows platform
  + Bug fix for token validation for aws:downloadContent plugin
  + Check if log group exists before uploading Session Manager logs to CloudWatch
  + Bug fix for broken S3 urls when using custom documents
- Update to 2.3.634.0 (2019-05-28)
  + Disable appconfig to load credential from specific profile path, add EC2 credentials as the default fallback
  + Remove sudoers file creation logic if ssm-user already exists
  + Enable supplementary groups for ssm-user on Linux
- Update to 2.3.612.0 (2019-05-08)
  + Bug fix for UTF-8 encoded issue caused by locale activation on Ubuntu 16.04 instance
  + Refactor ssm-user creation logic
  + Bug fix for reporting IP address with wrong network interface
  + Update configure package document arn pattern
- Update to 2.3.542.0 (2019-04-18)
  + Bug fix for on-premises instance registration in CN region
- Update to 2.3.539.0 (2019-04-04)
  + Add support for further encryption of session data using AWS KMS
  + Bug fix for excessive instance-id fetching by document workers
- Update to 2.3.479.0 (2019-03-06)
  + Bug fix for downloading content failure caused by wrong S3 endpoint
  + Bug fix for reboot failure caused by session manager panic
  + Bug fix for session manager shell output dropping character
  + Bug fix for mgs endpoint configuration consistency
- Update to 2.3.444.0 (2019-02-10)
  + Updates to UpdateInstanceInformation call, Windows initialization
- Add patch to remove unused import
  + remove-unused-import.patch
- Refresh patches for new version
  + fix-version.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1590580800">- Update to 2.3.1205.0:
  * Updated the SSM Agent Snap to core18
  * Bug fix for expired in-progress documents being resumed
  * Bug fix for update specific files not being deleted after agent update is finished
  * Bug fix for cached manifest files not being deleted in the configurepackage plugin</changelog>
  <changelog author="rjschwei@suse.com" date="1621425600">- Update to version 3.0.1209.0 (bsc#1186239, bsc#1186262)
  + For detailed changes see RELEASENOTES.md
  + Drop fix-version.patch replaced by sed expression in spec file
  + Drop remove-unused-import.patch no longer included from upstream
  + Drop fix-config.patch all SUSE distros use systemd
  + Remove amazon-ssm-agent.service included in upstream source, use it
  + Move all binaries into sbin and fix the hard coded config path via sed</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1624622400">- Update to version 3.0.1295.0
  + Added configurable custom identity and identity consumption order
  + Added cross-account domain join
  + Added cleanup for older versions of updater artifacts
  + Added a workaround for MacOS kernel bug that sometimes kept RunCommand from launching
  + Added a workaround for log file contention on Windows
  + Added synchronization to RunCommand service stop
  + Changed hibernation log level
  + MacOS executables are now signed
  + Removed delay in non-interactive session type</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650456000">- Update to version 3.1.1260.0
  + Added missing check for invalid S3 path parameter
  + Added support for domain join using a non-local username
  + Fixed broken links in README.md
  + Fixed ECS Exec issue where agent was using environment variables for credentials
  + Updated Ec2Detector test to query smbios directly for system information
- from version 3.1.1208.0
  + Updated ec2detector module to use Get-CmiInstance instead of wmic.exe
  + Fixed file creation mode of ssm-agent-users sudoer file (bsc#1196556, CVE-2022-29527)
- from version 3.1.1188.0
  + Added new ec2detector module to determine if agent is on EC2
  + Added support for port forwarding to remote host
  + Added quotes around inventory parameter ValueName on Windows
  + Fix for domain join DNS IP assignments in shared directories
  + Replaced namedpipe updater test with ec2detector test
- from version 3.1.1141.0
  + Add application inventory by file for Bottlerocket
  + Fix infinite retry logic to send failed replies in MGSInteractor
  + Remove usage of io/fs package
- from version 3.1.1080.0
  + (windows only) Remove symlink scan during update
- from version 3.1.1045.0
  + Fixed sourceHash validation for aws:application document plugin
  + Added document parameter validation for values passed to target document of aws:runDocument plugin
  + (windows only) Fix process leak when legacy cloudwatch plugin is enabled
  + (windows only) Fail installation if C:\ProgramData\Amazon\SSM\ has symlinks
- from version 3.1.1004.0
  + Added platform detection for Bottlerocket OS
  + Consolidated regional endpoint generation to common endpoint module
- from version 3.1.941.0
  + Added support for Rocky linux
  + Fixed sharefile/shareprofile not being propagated to updateutil
  + Fixed incorrect darwin platform detection post BigSur
  + Fixed log flush issue in updater
  + Updated .NET dependencies for domainjoin and cloudwatch (windows only)
  + Updated go version to 1.17.6
- from version 3.1.821.0
  + Implement new core module named MessageService to start processing commands from both MGS and MDS
  * Merge functionalities from RunCommandService core module and Session core module.
  * Receive run command documents through MGS if connected and fallback to MDS otherwise.
    This functionality requires appropriate permissions for both endpoints and will be rolled
    out gradually to end users.
  * Provide filesystem based idempotency check to avoid duplicate run command document execution.
  * Increase default run command pool buffer size from 1 to 5 to load additional documents
    before-hand for processing.
  + Fix nil pointer deference panic produced in named pipe test case during agent update
  + Remove StopType concept in ssm-agent-worker and add different waits for reboot and shutdown stop
- from version 3.1.804.0
  + Add support for upstart when running get-diagnostic command using ssm-cli
  + Fix systemctl service name to support older versions of systemctl
  + Include changes to facilitate testing
  + Update DNS server selection logic for seamless domain join on linux and darwin
  + Update go version to go1.17.5
  + Update golang sys package dependency
- from version 3.1.715.0
  + Derive default directories from appconfig on Darwin
  + Set x-bit on newly-created directories
- from version 3.1.634.0
  + Fix for ssm-setup-cli to be able to select service manager without the agent being installed
- from version 3.1.630.0
  + Added greengrass component recipe for the new SystemsManagerAgent component
  + Added support for registering agent on a greengrass device
  + Added support for downloading more than 1000 objects in downloadContent
  + Fixed retry logic for onprem and s3 upload
  + Fixed unit tests when running on Mac
  + Update AWS SDK to v1.41.4
  + Update logic to retrieve platform details for Rocky Linux
- from version 3.1.501.0
  + Add diagnostics command to ssm-cli
  + Fix caching for onprem credentials
  + Additional configuration options for Seamless Domain Join
  + Gracefully exit session if group of runas user is modified
  + Skip retries for cert validation errors in S3 HEAD requests
  + Fix DNS failures on CentOS 8.2
  + Update several dependencies
- from version 3.1.459.0
  + Fixed a bug with powershell command for Inventory
- from version 3.1.426.0
  + Fixed cpu spike issue manifesting on snap
  + Fixed issue with version comparison in EC2Config update plugin
  + Fixed panic when command output was being truncated
  + Updated build to use go1.16.8
  + Removed Profile from inventory powershell commands on Windows
- from version 3.1.338.0
  + Fix to eliminate WaitGroup reuse panic triggered during agent reboot
  + Fix to include applications without UninstallString in Inventory for Windows
  + Fixed a bug where multi-plugin documents with large outputs would timeout RunCommand
  + Fixed a bug where RunCommand could delay executions for up to 15 minutes
- from version 3.1.282.0
  + Add serial port logging of AwsNitroEnclaves package version on windows during startup
  + Allow usage of existing loggroup/logstream when the user does not have create permission
  + Change service interrogate request log to debug
  + Cleanup old surveyor channel files on startup
  + Fix filehandle leak in windows leading to agent going offline
  + Fix to schedule correct next run time during orchestration directories cleanup
  + Fix to sequentially update correct runcount value in the document bookkeeping file
  + Fix a bug with version parsing EC2Config updater
  + Updated rpm packaging for fips compliance
- from version 3.1.192.0
  + Added darwin arm64 to makefile
  + Added logic to limit orchestration directory cleanup
  + Added packaging for public SSM Agent container image
  + Fixed cloudwatch endpoint for telemetry metrics requests
  + Fixed handling of Windows filepaths and mutex locks
  + Fixed agent worker handling of OS signals and termination channel requests
  + Updated datachannel retry strategy to not retry for a specific error scenario
  + Updated default gomaxproc value for Windows
  + Update build to use go1.16.6
- from version 3.1.127.0
  + Added a workaround for windows random halts
  + Fixed race condition during reboot document execution
- from version 3.1.90.0
  + Updated to version 3.1
  + Updated build to build statically linked binaries for linux 64bit
  * Minimum supported linux kernel version for linux 64bit is 3.2+
  + Fixed permissions for docker config file
  + Fixed issue with ubuntu prerm and postinst scripts
  + Fixed issue where processor stop was being called twice
- from version 3.0.1390.0
  + Added config option to delete orchestration folder
  + Added snapcraft packaging config
  + Added workaround for aws:runDocument status bug
  + Added improved handling of file closure
  + Added support for go mod and updated build to use go 1.16.4
  + Fixed bug parsing vpce s3 urls
  + Refactored use of agent identity in agent cli
  + Updated check if agent is running as windows service
  + Updated handling of session cancellation to still send output to client side
  + Updated interactive session exit code logic to match non-interactive mode
  + Updated vendor dependencies
- Update directory path for GOPATH</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1650542400">- Fix mangled ExlusiveArch field</changelog>
</package>
<package pkgid="03e0d74b98604a81e054887569cfa69bcf704b8243612863a496b8cd951b5b12" name="apache-commons-fileupload" arch="noarch">
  <version epoch="0" ver="1.5" rel="150200.3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
</package>
<package pkgid="a97e94eab5d2bd51bc42590f34357e84afd0a4b6adcce5151448779bed5c60fa" name="apache-commons-fileupload" arch="src">
  <version epoch="0" ver="1.5" rel="150200.3.9.1"/>
  <changelog author="skh@suse.de" date="1094385600">- Initial package created with version 1.0 (JPackage 1.5)</changelog>
  <changelog author="skh@suse.de" date="1095336000">- Fix prerequires of javadoc subpackage</changelog>
  <changelog author="dmueller@suse.de" date="1127908800">- add norootforbuild</changelog>
  <changelog author="jsmeix@suse.de" date="1129636800">- Current version 1.0 from JPackage.org</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="skh@suse.de" date="1158926400">- don't use icecream
- use target="1.4" for build with java 1.5</changelog>
  <changelog author="mvyskocil@suse.cz" date="1205409600">- merged with jpackage 1.7
- update to 1.1.1</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1382011200">- fix bnc#846174/CVE-2013-2186: null byte injection flaw
  http://svn.apache.org/viewvc?view=revision&amp;revision=1507048
  * jakarta-commons-fileupload-CVE-2013-2186.patch</changelog>
  <changelog author="mvyskocil@suse.com" date="1382097600">- remove gcj part and deprecated macros</changelog>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
</package>
<package pkgid="62b131090fba68b961a56a9c2772b7657677e480935142437a235952074638e2" name="apache-commons-fileupload-javadoc" arch="noarch">
  <version epoch="0" ver="1.5" rel="150200.3.9.1"/>
  <changelog author="tchvatal@suse.com" date="1396440000">- Fix bnc#862781/CVE-2014-0050: buffer overflow
  http://svn.apache.org/viewvc?view=revision&amp;revision=1565143
  * jakarta-commons-fileupload-CVE-2014-0050-DOS-buffer-overflow.patch</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11
- remove removal of buildroot in %install</changelog>
  <changelog author="jmatejek@suse.com" date="1403870400">- added Xerces xml-apis to dependencies to fix build</changelog>
  <changelog author="tchvatal@suse.com" date="1404820800">- Cleanup with spec-cleaner and fix build on sle11 properly.</changelog>
  <changelog author="tchvatal@suse.com" date="1404820801">- Not needed condition.</changelog>
  <changelog author="fstrba@suse.com" date="1505736000">- Fix build with jdk9: specify java source and target 1.6
- Clean spec file and fix rpmlint warnings</changelog>
  <changelog author="fstrba@suse.com" date="1544184000">- Build against xml-commons-apis instead of xerces-j2-xml-apis</changelog>
  <changelog author="fstrba@suse.com" date="1554724800">- Rename to apache-commons-fileupload and upgrade to version 1.4
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1684843200">- Upgrade to upstream version 1.5
  * New features:
    + Add a configurable limit (disabled by default) for the number
    of files to upload per request (bsc#1208513, CVE-2023-24998).
    The new configuration option (FileUploadBase#setFileCountMax)
    is not enabled by default and must be explicitly configured.
  * Fixed Bugs:
    + FILEUPLOAD-293: DiskFileItem.write(File) had been changed to
    use FileUtils.moveFile internally, preventing an existing file
    as the target.
    + Improve parsing speed.
  * Changes:
    + Bump Commons IO to 2.11.0
    + FILEUPLOAD-328 Switch from Cobertura code coverage to Jacoco
    code coverage.
    + Bump JUnit to 4.13.2</changelog>
</package>
<package pkgid="41f9b863f1501b68f9d5e159304251634995c5bd0b41938b8af9e39c4c266eb8" name="apache-parent" arch="noarch">
  <version epoch="0" ver="28" rel="150200.3.9.1"/>
  <changelog author="fstrba@suse.com" date="1540296000">- Initial packaging of apache-parent</changelog>
  <changelog author="bwiedemann@suse.com" date="1617710400">- Check upstream source signature</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- SPEC file: Fixed URL tag</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 28:
  * [MPOM-345] - Respect property assembly.tarLongFileMode
  * [MPOM-347] - Allow custom Release Distribution Repository
  * [MPOM-323] Upgrade fluido skin to 1.11.0 by @slawekjaranowski in #86
  * [MPOM-322] Add ASF Data Privacy by @slawekjaranowski in #85
  * [MPOM-333] Drop outdated maven-docck-plugin from pluginManagement
  * [MPOM-334] Upgrade fluido skin to 1.11.1 by @slawekjaranowski in #90
  * [MPOM-305] Set minimum enforced Maven version to 3.2.5
  * [MPOM-288] - Update m-plugin-p to 3.6.4 by @kwin in #63
  * [MPOM-287] - Disable m2e warning for m-remote-resource-p:process
  * [MPOM-209]. Corrected Jira URL. by @ofarganc in #3
  * [MPOM-251] update minimum version to 3.1.1 by @elharo in #20
  * [MNGSITE-393] assume Maven 3 by @elharo in #21
  * [MPOM-256] Remove outdated clirr-maven-plugin by @slachiewicz in #27
  * [MPOM-260] simplify m-javadoc-p configuration by @hboutemy in #34
  * [MPOM-243] configure release profile with dedicated parameter by @kwin
  * [MPOM-244] upload SHA-512 only for source-release to staging repo by
  * [MPOM-263] enforce minimum Java build version 8 by @kwin in #46</changelog>
</package>
<package pkgid="a6711071424783d1f8c4b6d1d4dd1ba27c3a485f61338168fa19cd77a4ae2c86" name="apache-parent" arch="src">
  <version epoch="0" ver="28" rel="150200.3.9.1"/>
  <changelog author="fstrba@suse.com" date="1540296000">- Initial packaging of apache-parent</changelog>
  <changelog author="bwiedemann@suse.com" date="1617710400">- Check upstream source signature</changelog>
  <changelog author="rpm@fthiessen.de" date="1619179200">- SPEC file: Fixed URL tag</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 28:
  * [MPOM-345] - Respect property assembly.tarLongFileMode
  * [MPOM-347] - Allow custom Release Distribution Repository
  * [MPOM-323] Upgrade fluido skin to 1.11.0 by @slawekjaranowski in #86
  * [MPOM-322] Add ASF Data Privacy by @slawekjaranowski in #85
  * [MPOM-333] Drop outdated maven-docck-plugin from pluginManagement
  * [MPOM-334] Upgrade fluido skin to 1.11.1 by @slawekjaranowski in #90
  * [MPOM-305] Set minimum enforced Maven version to 3.2.5
  * [MPOM-288] - Update m-plugin-p to 3.6.4 by @kwin in #63
  * [MPOM-287] - Disable m2e warning for m-remote-resource-p:process
  * [MPOM-209]. Corrected Jira URL. by @ofarganc in #3
  * [MPOM-251] update minimum version to 3.1.1 by @elharo in #20
  * [MNGSITE-393] assume Maven 3 by @elharo in #21
  * [MPOM-256] Remove outdated clirr-maven-plugin by @slachiewicz in #27
  * [MPOM-260] simplify m-javadoc-p configuration by @hboutemy in #34
  * [MPOM-243] configure release profile with dedicated parameter by @kwin
  * [MPOM-244] upload SHA-512 only for source-release to staging repo by
  * [MPOM-263] enforce minimum Java build version 8 by @kwin in #46</changelog>
</package>
<package pkgid="26b0cabe85ad9a08242798d8f8b243a577560fe2e98736f666d48ddc7ef3712d" name="apache2-mod_php8" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f19ad64e27d62220dba8a5f9f481b3f8aa92d944ff394c417f07c6724cabc919" name="apache2-mod_php8" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a2c8216686dbbe6725d288c19ddf447dcebce9b066a732d7e5796af99c1105c7" name="apache2-mod_php8" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="730410db1b370943e807c045c7caf1483b0dbd963b5a871ded66ccc005da2b0d" name="apache2-mod_php8" arch="src">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="70faa26c5aa96672c87d7614bd5fce066c640d2315b41365eda037f00538265d" name="apache2-mod_php8" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2e3898384212444cf57135f08e62bb32c681be752aec212d5f0fb25894be6ab1" name="bluez" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="4b63e40917582daa59c94d49018c3e03649b7c1d0edaae04c0ffddc3bbedc773" name="bluez" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="a3de1a148a8286fd6955e56797455bbc6d9a0f0da613d13fc540ffd125b143aa" name="bluez" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="10e64251d9e34aa1af7be26e6aa72cc2728504728209a708d766a4ccb6569a83" name="bluez" arch="src">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="1d95f770326e7f2d137d01e65cad22c728c6eb6edb7949141eabb93c9e3903cf" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="23178e420b4a9fec2d79143640cf835144ce2cec42a1bbfd59730da65b9800e6" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="84b3b6cbeedd4a3c7207ada6a3bee8bd57e11442127331c0ff94de2caae59734" name="bluez-cups" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="693d7609046a9d2a7ceaf22fba6cbb3b0623eea521c53982fb8bc596b7e6f9e0" name="bluez-cups" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="57f3e8d56442f3c8233020210854376dd08415bd0d205d08a33de5dfce2c115e" name="bluez-cups" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="33c4fb07a6bcb1ae42dc03b834210d47942f4058e39eabf69b3d59effb0182e7" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="fdf66750c5b9cb1726f489d8bdf78e7a9a93f59bcff13e5909d645321f5ec440" name="bluez-deprecated" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="f152f63ba1990969cc215c1d797d515b2feccffe0e0187cd248c507fee7e0e6d" name="bluez-deprecated" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="ac4f202373d00d609de1390918dc1156c3499aa838e43b3af12c676fa05023b4" name="bluez-deprecated" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="896462c2993c413f176b805a08d081c9d1b3394c21bd74b66b90f2d7204b3a58" name="bluez-deprecated" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="7a7746de4cbffda0868853e19e10d755e7eabd8daec273e8650345a7d0b91fd1" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="e1dc876501448fd7affa06526dd2f26595a8596aee6e0ee9e05e0d65b19caf3e" name="bluez-devel" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="b8fd6e32bc5081bcd7a4bb6a1a3cc994629c71bd03b372c3bcbab740518cdbed" name="bluez-devel" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="0ba3936a308e93da6954eef6bd7762e67d726755d32ecea214ecf0dc94faf163" name="bluez-devel" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="2a897141534a51ae424233a2f680b03b6970121d5e1d11ea5f4f0b88c046316e" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5b91220e0cd433b139f5673c8ef670b6bcf783fbbc38fe71646113c46a0d6c86" name="bluez-obexd" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="465040eff1e596df4b59519908147cfd6f657fa0018b7d276ab25600d4f6bbdf" name="bluez-obexd" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="2a5ec6e10d290a31e0cf283ba2f49ee0ed516ec3560a260094967d3687e72be6" name="bluez-obexd" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="0c56c2566d9948bb7afcbbf4bf0390a9c77cbef886d4afaa9593b19dbd0ecea1" name="bluez-obexd" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="6a752c6fa6135cf18ba5d64b97f0430945de9cc7eb3b6cdfb350eca62d6fedbf" name="bluez-test" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5de97a8f1e9642335771f72c203ce60ccd01229b2d1fcd09394589fea1a4a7ef" name="bluez-test" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5431b1080fe1e5dad60729a742c860afbb71f0c3366307908bf572b1f43be768" name="bluez-test" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="8b72a0d0839f25aa1db0775490fcba6ac7214f8d031cfea20c12067f2a125379" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="cbcd0ef391b818fdc3eeed1e6e6c25b9e13d1e75f859c8a2dbd22c303d7909e6" name="bluez-zsh-completion" arch="noarch">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5285dde6b56c0d9cd6fd8059cd569cd0757eaec8f8e50192e0278d8329561524" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="99270795fd24748844f7352821b76706a71bdaec6a8eaa981c5b5dcc80b0fe37" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="d821e4cadb1aeaa173adbf7896d7226764ac92963d39f3591f92340cb7fa3f9e" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="7a9f7df9f790a5bfe2d8c9b39b55e73bc6e4486f3d8731bd2e1bb4b9e33e4b6d" name="bouncycastle-jmail" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="05eea43210e406d1b69bbed5525b6fe415b48f7725427e1d21561a7be2e3f1aa" name="bouncycastle-mail" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="40ff810b4bf1be87cd150cd5903382ad5a3acfb99ab58480db28efe66d31cd7c" name="bouncycastle-pg" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="7d09ece85cae82435c1fbccb868a587732678e4e9ac1cbd0a992f3aede29b6f9" name="bouncycastle-pkix" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="6ac465d76a2a638b8fcb59dfd54933b147eae5e720c4d97a76d3e04b4e1d04c1" name="bouncycastle-tls" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="de9733c894bbb09aa0d9fedbfdb4076a93eb0b884c2b8699b5967d20fb34f604" name="bouncycastle-util" arch="noarch">
  <version epoch="0" ver="1.73" rel="150200.3.18.1"/>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * CVE-2018-1000180: issue around primality tests for RSA key pair generation
    if done using only the low-level API [bsc#1096291]
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
  <changelog author="fstrba@suse.com" date="1569326400">- Package also the bcpkix bcpg bcmail bctls artifacts in separate
  sub-packages
- Revert to building with source/target 6, since it is still
  possible
- Added patch:
  * bouncycastle-javadoc.patch
    + fix javadoc build</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708800">- Version update to 1.63
  * Defects Fixed:
  - The ASN.1 parser would throw a large object exception for some objects
    which could be safely parsed.
  - GOST3412-2015 CTR mode was unusable at the JCE level.
  - The DSTU MACs were failing to reset fully on doFinal().
  - The DSTU MACs would throw an exception if the key was a multiple of the
    size as the MAC's underlying buffer size.
  - EdEC and QTESLA were not previously usable with the post Java 9 module structure.
  - ECNR was not correctly bounds checking the input and could produce invalid signatures.
  - ASN.1: Enforce no leading zeroes in OID branches (longer than 1 character).
  - TLS: Fix X448 support in JcaTlsCrypto.
  - Fixed field reduction for secp128r1 custom curve.
  - Fixed unsigned multiplications in X448 field squaring.
  - Some issues over subset Name Constraint validation in the CertPath analyser
  - TimeStampResponse.getEncoded() could throw an exception if the TimeStampToken was null.
  - Unnecessary memory usage in the ARGON2 implementation has been removed.
  - Param-Z in the GOST-28147 algorithm was not resolving correctly.
  - It is now possible to specify different S-Box parameters for the GOST 28147-89 MAC.
  * Additional Features and Functionality:
  - QTESLA is now updated with the round 2 changes. Note: the security catergories,
    and in some cases key generation and signatures, have changed. The round 1 version is
    now moved to org.bouncycastle.pqc.crypto.qteslarnd1, this package will be deleted in
    1.64. Please keep in mind that QTESLA may continue to evolve.
  - Support has been added for generating Ed25519/Ed448 signed certificates.
  - A method for recovering the message/digest value from an ECNR signature has been added.
  - Support for the ZUC-128 and ZUC-256 ciphers and MACs has been added to the provider
    and the lightweight API.
  - Support has been added for ChaCha20-Poly1305 AEAD mode from RFC 7539.
  - Improved performance for multiple ECDSA verifications using same public key.
  - Support for PBKDF2withHmacSM3 has been added to the BC provider.
  - The S/MIME API has been fixed to avoid unnecessary delays due to DNS resolution of a
    hosts name in internal MimeMessage preparation.
  - The valid path for EST services has been updated to cope with the characters used in
    the Aruba clearpass EST implementation.
- Version update to 1.62
  * Defects Fixed:
  - DTLS: Fixed infinite loop on IO exceptions.
  - DTLS: Retransmission timers now properly apply to flights monolithically.
  - BCJSSE: setEnabledCipherSuites ignores unsupported cipher suites.
  - BCJSSE: SSLSocket implementations store passed-in 'host' before connecting.
  - BCJSSE: Handle SSLEngine closure prior to handshake.
  - BCJSSE: Provider now configurable using security config under Java 11 and later.
  - EdDSA verifiers now reject overly long signatures.
  - XMSS/XMSS^MT OIDs now using the values defined in RFC 8391.
  - XMSS/XMSS^MT keys now encoded with OID at start.
  - An error causing valid paths to be rejected due to DN based name constraints
    has been fixed in the CertPath API.
  - Name constraint resolution now includes special handling of serial numbers.
  - Cipher implementations now handle ByteBuffer usage where the ByteBuffer has
    no backing array.
  - CertificateFactory now enforces presence of PEM headers when required.
  - A performance issue with RSA key pair generation that was introduced in 1.61
    has been mostly eliminated.
  * Additional Features and Functionality:
  - Builders for X509 certificates and CRLs now support replace and remove extension methods.
  - DTLS: Added server-side support for HelloVerifyRequest.
  - DTLS: Added support for an overall handshake timeout.
  - DTLS: Added support for the heartbeat extension (RFC 6520).
  - DTLS: Improve record seq. behaviour in HelloVerifyRequest scenarios.
  - TLS: BasicTlsPSKIdentity now reusable (returns cloned array from getPSK).
  - BCJSSE: Improved ALPN support, including selectors from Java 9.
  - Lightweight RSADigestSigner now support use of NullDigest.
  - SM2Engine now supports C1C3C2 mode.
  - SHA256withSM2 now added to provider.
  - BCJSSE: Added support for ALPN selectors (including in BC extension API for earlier JDKs).
  - BCJSSE: Support 'SSL' algorithm for SSLContext (alias for 'TLS').
  - The BLAKE2xs XOF has been added to the lightweight API.
  - Utility classes added to support journaling of SecureRandom and algorithms to allow
    persistance and later resumption.
  - PGP SexprParser now handles some unprotected key types.
  - NONEwithRSA support added to lightweight RSADigestSigner.
  - Support for the Ethereum flavor of IES has been added to the lightweight API.
- Version update to 1.61
  * Defects Fixed:
  - Use of EC named curves could be lost if keys were constructed.
    via a key factory and algorithm parameters.
  - RFC3211WrapEngine would not properly handle messages longer than 127 bytes.
  - The JCE implementations for RFC3211 would not return null AlgorithmParameters.
  - TLS: Don't check CCS status for hello_request.
  - TLS: Tolerate unrecognized hash algorithms.
  - TLS: Tolerate unrecognized SNI types.
  - Incompatibility issue in ECIES-KEM encryption in cofactor fixed.
  - Issue with XMSS/XMSSMT private key loading which could result in invalid signatures fixed.
  - StateAwareSignature.isSigningCapable() now returns false when the
    key has reached it's maximum number of signatures.
  - The McEliece KeyPairGenerator was failing to initialize the underlying
    class if a SecureRandom was explicitly passed.
  - The McEliece cipher would sometimes report the wrong value on a call
    to Cipher.getOutputSize(int).
  - CSHAKEDigest.leftEncode() was using the wrong endianness for multi byte values.
  - Some ciphers, such as CAST6, were missing AlgorithmParameters implementations.
  - An issue with the default "m" parameter for 1024 bit Diffie-Hellman keys which
    could result in an exception on key pair generation has been fixed.
  - The SPHINCS256 implementation is now more tolerant of parameters wrapped with a
    SecureRandom and will not throw an exception if it receives one.
  - A regression in PGPUtil.writeFileToLiteralData() which could cause corrupted
    literal data has been fixed.
  - Several parsing issues related to the processing of CMP PKIPublicationInfo.
  - The ECGOST curves for id-tc26-gost-3410-12-256-paramSetA and
    id-tc26-gost-3410-12-512-paramSetC had incorrect co-factors.
  * Additional Features and Functionality:
  - The qTESLA signature algorithm has been added to PQC light-weight API and the PQC provider.
  - The password hashing function, Argon2 has been added to the lightweight API.
  - BCJSSE: Added support for endpoint ID validation (HTTPS, LDAP, LDAPS).
  - BCJSSE: Added support for 'useCipherSuitesOrder' parameter.
  - BCJSSE: Added support for ALPN.
  - BCJSSE: Various changes for improved compatibility with SunJSSE.
  - BCJSSE: Provide default extended key/trust managers.
  - TLS: Added support for TLS 1.2 features from RFC 8446.
  - TLS: Removed support for EC point compression.
  - TLS: Removed support for record compression.
  - TLS: Updated to RFC 7627 from draft-ietf-tls-session-hash-04.
  - TLS: Improved certificate sig. alg. checks.
  - TLS: Finalised support for RFC 8442 cipher suites.
  - Support has been added to the main Provider for the Ed25519 and Ed448 signature algorithms.
  - Support has been added to the main Provider for the X25519 and X448 key agreement algorithms.
  - Utility classes have been added for handling OpenSSH keys.
  - Support for processing messages built using GPG and Curve25519 has been added to the OpenPGP API.
  - The provider now recognises the standard SM3 OID.
  - A new API for directly parsing and creating S/MIME documents has been added to the PKIX API.
  - SM2 in public key cipher mode has been added to the provider API.
  - The BCFKSLoadStoreParameter has been extended to allow the use of certificates and digital
    signatures for verifying the integrity of BCFKS key stores.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570708801">- Version update to 1.64 [bsc#1153385, CVE-2019-17359]
  [bsc#1096291, CVE-2018-1000180][bsc#1100694, CVE-2018-1000613]
  * Security Advisory:
  - CVE-2019-17359: A change to the ASN.1 parser in 1.63 introduced
    a regression that can cause an OutOfMemoryError to occur on
    parsing ASN.1 data.
  * Defects Fixed:
  - OpenSSH: Fixed padding in generated Ed25519 private keys.
  - GOST3410-2012-512 now uses the GOST3411-2012-256 as its KDF digest.
  - Validation of headers in PemReader now looks for tailing dashes in header.
  - Some compatibility issues around the signature encryption algorithm
    field in CMS SignedData and the GOST algorithms have been addressed.
  * Additional Features and Functionality:
  - PKCS12 key stores containing only certificates can now be created
    without the need to provide passwords.
  - BCJSSE: Initial support for AlgorithmConstraints; protocol versions
    and cipher suites.
  - BCJSSE: Initial support for 'jdk.tls.disabledAlgorithms'; protocol
    versions and cipher suites.
  - BCJSSE: Add SecurityManager check to access session context.
  - BCJSSE: Improved SunJSSE compatibility of the NULL_SESSION.
  - BCJSSE: SSLContext algorithms updated for SunJSSE compatibility
    (default enabled protocols).
  - The digest functions Haraka-256 and Haraka-512 have been added to
    the provider and the light-weight API
  - XMSS/XMSS^MT key management now allows for allocating subsets of the
    private key space using the extraKeyShard() method. Use of
    StateAwareSignature is now deprecated.
  - Support for Java 11's NamedParameterSpec class has been added
    (using reflection) to the EC and EdEC KeyPairGenerator implementations.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1570881600">- Update pom files with those from Maven repository.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1573041600">- Fix arch dependent macros in noarch package [bsc#1109539]</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Added patch:
  * bouncycastle-osgi.patch
    + Add OSGi manifests to the distributed jars so that they can
    be used from eclipse</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588161600">- Version update to 1.65
  * Defects Fixed:
  - DLExternal would encode using DER encoding for tagged SETs.
  - ChaCha20Poly1305 could fail for large (&gt;~2GB) files.
  - ChaCha20Poly1305 could fail for small updates when used via the provider.
  - Properties.getPropertyValue could ignore system property when other
    local overrides set.
  - The entropy gathering thread was not running in daemon mode, meaning there
    could be a delay in an application shutting down due to it.
  - A recent change in Java 11 could cause an exception with the BC Provider's
    implementation of PSS.
  - BCJSSE: TrustManager now tolerates having no trusted certificates.
  - BCJSSE: Choice of credentials and signing algorithm now respect the peer's
    signature_algorithms extension properly.
  - BCJSSE: KeyManager for KeyStoreBuilderParameters no longer leaks memory.
  * Additional Features and Functionality:
  - LMS and HSS (RFC 8554) support has been added to the low level library and
    the PQC provider.
  - SipHash128 support has been added to the low level library and the JCE provider.
  - BCJSSE: BC API now supports explicitly specifying the session to resume.
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: Added support for extended_master_secret system properties:
    jdk.tls.allowLegacyMasterSecret, jdk.tls.allowLegacyResumption,
    jdk.tls.useExtendedMasterSecret .
  - BCJSSE: Ed25519, Ed448 are now supported when TLS 1.2 or higher is
    negotiated (except in FIPS mode).
  - BCJSSE: KeyManager and TrustManager now check algorithm constraints for
    keys and certificate chains.
  - BCJSSE: KeyManager selection of server credentials now prefers matching
    SNI hostname (if any).
  - BCJSSE: KeyManager may now fallback to imperfect credentials (expired,
    SNI mismatch).
  - BCJSSE: Client-side OCSP stapling support (beta version: via status_request
    extension only, provides jdk.tls.client.enableStatusRequestExtension, and
    requires CertPathBuilder support).
  - TLS: DSA in JcaTlsCrypto now falls back to stream signing to work around
    NoneWithDSA limitations in default provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1595937600">- Version update to 1.66 [bsc#1186328, CVE-2020-15522]
  * Defects Fixed:
  - EdDSA verifiers now reset correctly after rejecting overly long signatures.
  - BCJSSE: SSLSession.getPeerCertificateChain could throw NullPointerException.
  - qTESLA-I verifier would reject some valid signatures.
  - qTESLA verifiers now reject overly long signatures.
  - PGP regression caused failure to preserve existing version header when
    headers were reset.
  - PKIXNameConstraintValidator had a bad cast preventing use of multiple
    OtherName constraints.
  - Serialisation of the non-CRT RSA Private Key could cause a NullPointerException.
  - An extra 4 bytes was included in the start of HSS public key encodings.
  - CMS with Ed448 using a direct signature was using id-shake256-len
    rather than id-shake256.
  - Use of GCMParameterSpec could cause an AccessControlException under
    some circumstances.
  - DTLS: Fixed high-latency HelloVerifyRequest handshakes.
  - An encoding bug for rightEncoded() in KMAC has been fixed.
  - For a few values the cSHAKE implementation would add unnecessary pad bytes
    where the N and S strings produced encoded data that was block aligned.
  - There were a few circumstances where Argon2BytesGenerator might hit an
    unexpected null. These have been removed.
  * Additional Features and Functionality
  - The qTESLA signature algorithm has been updated to v2.8 (20191108).
  - BCJSSE: Client-side OCSP stapling now supports status_request_v2 extension.
  - Support has been added for "ocsp.enable", "ocsp.responderURL" and
    PKIXRevocationChecker for users of Java 8 and later.
  - Support has been added for "org.bouncycastle.x509.enableCRLDP" to the PKIX validator.
  - BCJSSE: Now supports system property 'jsse.enableFFDHE'
  - BCJSSE: Now supports system properties 'jdk.tls.client.SignatureSchemes'
    and 'jdk.tls.server.SignatureSchemes'.
  - Multi-release support has been added for Java 11 XECKeys.
  - Multi-release support has been added for Java 15 EdECKeys.
  - The MiscPEMGenerator will now output general PrivateKeyInfo structures.
  - A new property "org.bouncycastle.pkcs8.v1_info_only" has been added to
    make the provider only produce version 1 PKCS8 PrivateKeyInfo structures.
  - The PKIX CertPathBuilder will now take the target certificate from the target
    constraints if a specific certificate is given to the selector.
  - BCJSSE: A range of ARIA and CAMELLIA cipher suites added to supported list.
  - BCJSSE: Now supports the PSS signature schemes from RFC 8446 (TLS 1.2 onwards).
  - Performance of the Base64 encoder has been improved.
  - The PGPPublicKey class will now include direct key signatures when checking
    for key expiry times.
  * NOTES:
  - The qTESLA update breaks compatibility with previous versions.
    Private keys now include a hash of the public key at the end,
    and signatures are no longer interoperable with previous versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1608552000">- Version update to 1.67 [bsc#1180215, CVE-2020-28052]
  * CVE-2020-28052: OpenBSDBCrypt.checkPassword utility method
    compared incorrect data when checking the password
  * Defects Fixed:
  - BCJSSE: SunJSSE compatibility fix - override of getChannel()
    removed and 'urgent data' behaviour should now conform to
    what the SunJSSE expects
  - Nested BER data could sometimes cause issues in octet strings
  - Certificates/CRLs with short signatures could cause an exception
    in toString() in the BC X509 Certificate implmentation
  - In line with latest changes in the JVM, SignatureSpis which
    don't require parameters now return null on engineGetParameters()
  - The RSA KeyFactory now always preferentially produces RSAPrivateCrtKey
    where it can on requests for a KeySpec based on an RSAPrivateKey
  - CMSTypedStream$FullReaderStream now handles zero length reads correctly
  - Unecessary padding was added on KMAC when the key string was block aligned
  - Zero length data would cause an unexpected exception from RFC5649WrapEngine
  - OpenBSDBcrypt was failing to handle some valid prefixes
  * Additional Features and Functionality
  - Performance improvement of Argon2 and Noekeon
  - A setSessionKeyObfuscation() method has been added to
    PublicKeyKeyEncryptionMethodGenerator to allow turning off of session key
    obfuscation (default is on, method primarily to get around early version
    GPG issues with AES-128 keys)
  - Implemented 'safegcd' constant-time modular inversion (as well as a
    variable-time variant). It has replaced Fermat inversion in all our EC
    code, and BigInteger.modInverse in several other places, particularly
    signers. This improves side-channel protection, and also gives a
    significant performance boost
  - Performance of custom binary ECC curves and Edwards Curves has been improved
  - BCJSSE: New boolean system property 'org.bouncycastle.jsse.keyManager.checkEKU'
    allows to disable ExtendedKeyUsage restrictions when selecting credentials
    (although the peer may still complain)
  - Initial support has been added for "Composite Keys and Signatures For Use
    In Internet PKI" using the test OID. Please note there will be further
    refinements to this as the draft is standardised
  - The BC EdDSA signature API now supports keys implementing all methods on
    the EdECKey and XECKey interfaces directly
  - Work has begun on classes to support the ETSI TS 103 097, Intelligent
    Transport Systems (ITS) in the bcpkix package
  - Further optimization work has been done on GCM
  - A NewHope based processor, similar to the one for Key Agreement has been
    added for trying to "quantum hard" KEM algorithms
  - PGP clear signed signatures now support SHA-224
  - Treating absent vs NULL as equivalent can now be configured by a system
    property. By default this is not enabled
  - Mode name checks in Cipher strings should now make sure an improper mode
    name always results in a NoSuchAlgorithmException
  - In line with changes in OpenSSL, the OpenSSLPBKDF now uses UTF8 encoding</changelog>
  <changelog author="fstrba@suse.com" date="1610539200">- Version update to 1.68
  * Defects Fixed:
  - Some BigIntegers utility methods would fail for
    BigInteger.ZERO. This has been fixed.
  - PGPUtil.isKeyRing() was not detecting secret sub-keys in its
    input. This has been fixed.
  - The ASN.1 class, ArchiveTimeStamp was insisting on a value
    for the optional reducedHashTree field. This has been fixed.
  - BCJSSE: Lock against multiple writers - a possible
    synchronization issue has been removed.
  * Additional Features and Functionality
  - BCJSSE: Added support for system property
    com.sun.net.ssl.requireCloseNotify. Note that we are using a
    default value of 'true'.
  - BCJSSE: 'TLSv1.3' is now a supported protocol for both client
    and server. For this release it is only enabled by default for
    the 'TLSv1.3' SSLContext, but can be explicitly enabled using
    'setEnabledProtocols' on an SSLSocket or SSLEngine, or via
    SSLParameters.
  - BCJSSE: Session resumption is now also supported for servers
    in TLS 1.2 and earlier. For this release it is disabled by
    default, and can be enabled by setting the boolean system
    property org.bouncycastle.jsse.server.enableSessionResumption
    to 'true'.
  - The provider RSA-PSS signature names that follow the JCA
    naming convention.
  - FIPS mode for the BCJSSE now enforces namedCurves for any
    presented certificates.
  - PGPSignatureSubpacketGenerator now supports editing of a
    pre-existing sub-packet list.</changelog>
  <changelog author="pmonreal@suse.com" date="1621944000">- Add bouncycastle_getpoms.sh to get pom files from Maven repos</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Directory core/docs does not exist</changelog>
  <changelog author="fstrba@suse.com" date="1647518400">- Add glassfish-activation-api dependency so that we can build with
  JDK that does not contain the JavaEE modules</changelog>
  <changelog author="fstrba@suse.com" date="1647604800">- Build with source/target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1648641600">- Build against the standalone JavaEE modules unconditionally</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1650628800">- Version update to 1.71
  * Defects Fixed
  - In line with GPG the PGP API now attempts to preserve
    comments containing non-ascii UTF8 characters.
  - An accidental partial dependency on Java 1.7 has been removed
    from the TLS API.
  - JcaPKIXIdentityBuilder would fail to process File objects
    correctly. This is now fixed.
  - Some byte[] parameters to the CMP API were not being
    defensively cloned to prevent accidental changes. Extra
    defensive cloning has been added.
  - CMS primitives would sometimes convert ASN.1 definite-length
    encodings into indefinite-length encodings. The primitives
    will now try and preserve the original encoding where possible.
  - CMSSignedData.getAttributeCertificates() now properly
    restricts the tag values checked to just 1 (the obsolete
    v1 tag) and 2 (for the more current v2 certificates).
  - BCJSSE now tries to validate a custom KeyManager selection
    in order to catch errors around a key manager ignoring
    key type early.
  - Compressed streams in PGP ending with zero length partial
    packets could cause failure on parsing the OpenPGP API.
    This has been fixed.
  - The fallback mode for JceAsymmetricKeyWrapper/Unwrapper
    would lose track of any algorithm parameters generated
    in the initial attempt. The algorithm parameters are now
    propagated.
  - An accidental regression introduced by a fix for another
    issue in PKIXCertPathReviewer around use of the
    AuthorityKeyIdentifier extension and it failing to match
    a certificate uniquely when the serial number field
    is missing has been fixed.
  - An error was found in the creation of TLS 1.3 Export Keying
    Material which could cause compatibility issues. This has
    been fixed.
  * Additional Features and Functionality
  - Support has been added for OpenPGP regular expression
    signature packets.
  - Support has been added for OpenPGP PolicyURI signature
    packets.
  - A utility method has been added to PGPSecretKeyRing to allow
    for inserting or replacing a PGPPublicKey.
  - The NIST PQC Finalist, Classic McEliece has been added to the
    low level API and the BCPQC provider.
  - The NIST PQC Alternate Candidate, SPHINCS+ has been added to
    the BCPQC provider.
  - The NIST PQC Alternate Candidate, FrodoKEM has been added to
    the low level API and the BCPQC provider.
  - The NIST PQC Finalist, SABER has been added to the low level
    API and the BCPQC provider.
  - KMAC128, KMAC256 has been added to the BC provider (empty
    customization string).
  - TupleHash128, TupleHash256 has been added to the BC provider
    (empty customization string).
  - ParallelHash128, ParallelHash256 has been added to the BC
    provider (empty customization string, block size 1024 bits).
  - Two new properties: "org.bouncycastle.rsa.max_size" (default
    15360) and "org.bouncycastle.ec.fp_max_size" (default 1042)
    have been added to cap the maximum size of RSA and EC keys.
  - RSA modulus are now checked to be provably composite using
    the enhanced MR probable prime test.
  - Imported EC Fp basis values are now validated against the MR
    prime number test before use. The certainty level of the
    prime test can be determined by
    "org.bouncycastle.ec.fp_certainty" (default 100).
  - The BC entropy thread now has a specific name:
    "BC-ENTROPY-GATHERER".
  - Utility methods have been added for joining/merging PGP
    public keys and signatures.
  - Blake3-256 has been added to the BC provider.
  - DTLS: optimisation to delayed handshake hash.
  - Further additions to the ETSI 102 941 support in the ETSI/ITS
    package: certification request, signed message generation and
    verification now supported.
  - CMSSignedDataGenerator now supports the direct generation of
    definite-length data.
  - The NetscapeCertType class now has a hasUsages() method on it
    for querying usage settings on its bit string.
  - Support for additional input has been added for deterministic
    (EC)DSA.
  - The OpenPGP API provides better support for subkey
    generation.
  - BCJSSE: Added boolean system properties
    "org.bouncycastle.jsse.client.dh.disableDefaultSuites" and
    "org.bouncycastle.jsse.server.dh.disableDefaultSuites".
    Default "false". Set to "true" to disable inclusion of DH
    cipher suites in the default cipher suites for client/server
    respectively.
  * Notes
  - The deprecated QTESLA implementation has been removed from
    the BCPQC provider.
  - The submission update to SPHINCS+ has been added. This
    changes the generation of signatures - particularly
    deterministic ones.
- Version update to 1.70
  * Defects Fixed
  - Blake 3 output limit is enforced.
  - The PKCS12 KeyStore was relying on default precedence for its
    key Cipher implementation so was sometimes failing if used
    from the keytool. The KeyStore class now makes sure it uses
    the correct Cipher implementation.
  - Fixed bzip2 compression for empty contents (GH #993).
  - ASN.1: More robust handling of high tag numbers and
    definite-length forms.
  - BCJSSE: Fix a concurrent modification issue in session
    contexts (GH#968).
  - BCJSSE: Don't log sensitive system property values (GH#976).
  - BCJSSE: Fixed a priority issue amongst imperfect-match
    credentials in KeyManager classes.
  - The IES AlgorithmParameters object has been re-written to
    properly support all the variations of IESParameterSpec.
  - getOutputSize() for ECIES has been corrected to avoid
    occassional underestimates.
  - The lack of close() in the ASN.1 Dump command line utility
    was triggering false positives in some code analysis tools. A
    close() call has been added.
  - PGPPublicKey.getBitStrength() now properly recognises EdDSA
    keys.
  * Additional Features and Functionality
  - Missing PGP CRC checksums can now be optionally ignored using
    setDetectMissingCRC() (default false) on ArmoredInputStream.
  - PGPSecretKey.copyWithNewPassword() now has a variant which
    uses USAGE_SHA1 for key protection if a PGPDigestCalculator
    is passed in.
  - PGP ASCII armored data now skips "\t", "\v", and "\f".
  - PKCS12 files with duplicate localKeyId attributes on
    certificates will now have the incorrect attributes filtered
    out, rather than the duplicate causing an exception.
  - PGPObjectFactory will now ignore packets representing
    unrecognised signature versions in the input stream.
  - The X.509 extension generator will now accumulate some
    duplicate X.509 extensions into a single extension where it
    is possible to do so.
  - Removed support for maxXofLen in Kangaroo digest.
  - Ignore marker packets in PGP Public and Secret key ring
    collection.
  - An implementation of LEA has been added to the low-level API.
  - Access, recovery, and direct use for PGP session keys has
    been added to the OpenPGP API for processing encrypted data.
  - A PGPCanonicalizedDataGenerator has been added which converts
    input into canonicalized literal data for text and UTF-8
    mode.
  - A getUserKeyingMaterial() method has been added to the
    KeyAgreeRecipientInformation class.
  - ASN.1: Tagged objects (and parsers) now support all tag
    classes. Special code for ApplicationSpecific has been
    deprecated and re-implemented in terms of TaggedObject.
  - ASN.1: Improved support for nested tagging.
  - ASN.1: Added support for GraphicString, ObjectDescriptor,
    RelativeOID.
  - ASN.1: Added support for constructed BitString encodings,
    including efficient parsing for large values.
  - TLS: Added support for external PSK handshakes.
  - TLS: Check policy restrictions on key size when determining
    cipher suite support.
  - A performance issue in KeccakDigest due to left over debug
    code has been identified and dealt with.
  - BKS key stores can now be used for collecting protected keys
    (note: any attempt to store such a store will cause an
    exception).
  - A method for recovering user keying material has been added
    to KeyAgreeRecipientInformation.
  - Support has been added to the CMS API for SHA-3 based
    PLAIN-ECDSA.
  - The low level BcDefaultDigestProvider now supports the SHAKE
    family of algorithms and the SM3 alogirthm.
  - PGPKeyRingGenerator now supports creation of key-rings with
    direct-key identified keys.
  - The PQC NIST candidate, signature algorithm SPHINCS+ has been
    added to the low-level API.
  - ArmoredInputStream now explicitly checks for a '\n' if in
    crLF mode.
  - Direct support for NotationDataOccurances, Exportable,
    Revocable, IntendedRecipientFingerPrints, and AEAD algorithm
    preferences has been added to PGPSignatureSubpacketVector.
  - Further support has been added for keys described using
    S-Expressions in GPG 2.2.X.
  - Support for OpenPGP Session Keys from the (draft) Stateless
    OpenPGP CLI has been added.
  - Additional checks have been added for PGP marker packets in
    the parsing of PGP objects.
  - A CMSSignedData.addDigestAlgorithm() has been added to allow
    for adding additional digest algorithm identifiers to CMS
    SignedData structures when required.
  - Support has been added to CMS for the LMS/HSS signature
    algorithm.
  - The system property
    "org.bouncycastle.jsse.client.assumeOriginalHostName"
    (default false) has been added for dealing with SNI problems
    related to the host name not being propagate by the JVM.
  - The JcePKCSPBEOutputEncryptorBuilder now supports SCRYPT with
    ciphers that do not have algorithm parameters (e.g. AESKWP).
  - Support is now added for certificates using ETSI TS 103 097,
    "Intelligent Transport Systems (ITS)" in the bcpkix package.
  * Notes.
  - While this release should maintain source code compatibility,
    developers making use of some parts of the ASN.1 library will
    find that some classes need recompiling. Apologies for the
    inconvenience.
- Version update to 1.69
  * Defects Fixed
  - Lightweight and JCA conversion of Ed25519 keys in the PGP API
    could drop the leading byte as it was zero. This has been
    fixed.
  - Marker packets appearing at the start of PGP public key rings
    could cause parsing failure. This has been fixed.
  - ESTService could fail for some valid Content-Type headers.
    This has been fixed.
  - Originator key algorithm parameters were being passed as NULL
    in key agreement recipients. The parameters now reflect the
    value of the parameters in the key's SubjectPublicKeyInfo.
  - ContentType on encapsulated data was not been passed through
    correctly for authenticated and enveloped data. This has been
    fixed.
  - NTRUEncryptionParameters and
    NTRUEncryptionKeyGenerationParameters were not correctly
    cloning the contained message digest. This has been fixed.
  - CertificateFactory.generateCertificates()/generateCRLs()
    would throw an exception if extra data was found at the end
    of a PEM file even if valid objects had been found. Extra
    data is now ignored providing at least one object found.
  - Internal class PKIXCRLUtil could throw a NullPointerException
    for CRLs with an absent nextUpdate field. This has been
    fixed.
  - PGP ArmoredInputStream now fails earlier on malformed
    headers.
  - The McElieceKobaraImaiCipher was randomly throwing "Bad
    Padding: invalid ciphertext" exception while decrypting due
    to leading zeroes been missed during processing of the cipher
    text. This has been fixed.
  - Ed25519 keys being passed in via OpenSSH key spec are now
    validated in the KeyFactory.
  - Blowfish keys are now range checked on cipher construction.
  - In some cases PGPSecretKeyRing was failing to search its
    extraPubKeys list when searching for public keys.
  - The BasicConstraintsValidation class in the BC cert path
    validation tools has improved conformance to RFC 5280.
  - AlgorithmIdentifiers involving message digests now attempt to
    follow the latest conventions for the parameters field
    (basically DER NULL appears less).
  - Fix various conversions and interoperability for XDH and
    EdDSA between BC and SunEC providers.
  - TLS: Prevent attempts to use KeyUpdate mechanism in versions
    before TLS 1.3.
  * Additional Features and Functionality
  - GCM-SIV has been added to the lightweight API and the
    provider.
  - Blake3 has been added to the lightweight API.
  - The OpenSSL PEMParser can now be extended to add specialised
    parsers.
  - Base32 encoding has now been added, the default alphabet is
    from RFC 4648.
  - The KangarooTwelve message digest has been added to the
    lightweight API.
  - An implementation of the two FPE algorithms, FF1 and FF3-1 in
    SP 800-38G has been added to the lightweight API and the JCE
    provider.
  - An implementation of ParallelHash has been added to the
    lightweight API.
  - An implementation of TupleHash has been added to the
    lightweight API.
  - RSA-PSS now supports the use of SHAKE128 and SHAKE256 as the
    mask generation function and digest.
  - ECDSA now supports the use of SHAKE128 and SHAKE256.
  - PGPPBEEncryptedData will now reset the stream if the initial
    checksum fails so another password can be tried.
  - Iterators on public and secret key ring collections in PGP
    now reflect the original order of the public/secret key rings
    they contain.
  - KeyAgreeRecipientInformation now has a getOriginator() method
    for retrieving the underlying orginator information.
  - PGPSignature now has a getDigestPrefix() method for people
    wanting exposure to the signature finger print details.
  - The old BKS-V1 format keystore is now disabled by default. If
    you need to use BKS-V1 for legacy reasons, it can be
    re-enabled by adding: org.bouncycastle.bks.enable_v1=true to
    the java.security file. We would be interested in hearing
    from anyone that needs to do this.
  - PLAIN-ECDSA now supports the SHA3 digests.
  - Some highlevel support for RFC 4998 ERS has been added for
    ArchiveTimeStamp and EvidenceRecord. The new classes are in
    the org.bouncycastle.tsp.ers package.
  - ECIES has now also support SHA256, SHA384, and SHA512.
  - digestAlgorithms filed in CMS SignedData now includes counter
    signature digest algorithms where possible.
  - A new property "org.bouncycastle.jsse.config" has been added
    which can be used to configure the BCJSSE provider when it is
    created using the no-args constructor.
  - In line with changes in OpenSSL 1.1.0,
    OpenSSLPBEParametersGenerator can now be configured with a
    digest.
  - PGPKeyRingGenerator now includes a method for adding a subkey
    with a primary key binding signature.
  - Support for ASN.1 PRIVATE tags has been added.
  - Performance enhancements to Nokeon, AES, GCM, and
    SICBlockCipher.
  - Support for ecoding/decoding McElieceCCA2 keys has been added
    to the PQC API
  - BCJSSE: Added support for jdk.tls.maxCertificateChainLength
    system property (default is 10).
  - BCJSSE: Added support for jdk.tls.maxHandshakeMessageSize
    system property (default is 32768).
  - BCJSSE: Added support for jdk.tls.client.enableCAExtension
    (default is 'false').
  - BCJSSE: Added support for jdk.tls.client.cipherSuites system
    property.
  - BCJSSE: Added support for jdk.tls.server.cipherSuites system
    property.
  - BCJSSE: Extended ALPN support via standard JSSE API to JDK 8
    versions after u251/u252.
  - BCJSSE: Key managers now support EC credentials for use with
    TLS 1.3 ECDSA signature schemes (including brainpool).
  - TLS: Add TLS 1.3 support for brainpool curves per RFC 8734.
  * Notes
  - There is a small API change in the PKIX package to the
    DigestAlgorithmIdentifierFinder interface as a find() method
    that takes an ASN1ObjectIdentifier has been added to it. For
    people wishing to extend their own implementations, see
    DefaultDigestAlgorithmIdentifierFinder for a sample
    implementation.
  - A version of the bcmail API supporting Jakarta Mail has now
    been added (see bcjmail jar).
  - Some work has been done on moving out code that does not need
    to be in the provider jar. This has reduced the size of the
    provider jar and should also make it easier for developers to
    patch the classes involved as they no longer need to be
    signed. bcpkix and bctls are both dependent on the new bcutil
    jar.
- Add build dependencies on
  mvn(jakarta.activation:jakarta.activation-api) and
  mvn(jakarta.mail:jakarta.mail-api)
- Remove unneeded script bouncycastle_getpoms.sh from sources</changelog>
  <changelog author="pmonreal@suse.com" date="1666180800">- Update to version 1.72:
  * Defects Fixed:
  - There were parameter errors in XMSS^MT OIDs for
    XMSSMT_SHA2_40/4_256 and XMSSMT_SHA2_60/3_256. These have
    been fixed.
  - There was an error in Merkle tree construction for the
    Evidence Records (ERS) implementation which could result in
    invalid roots been timestamped. ERS now produces an
    ArchiveTimeStamp for each data object/group with an associated
    reduced hash tree. The reduced hash tree is now calculated as
    a simple path to the root of the tree for each record.
  - OpenPGP will now ignore signatures marked as non-exportable
    on encoding.
  - A tagging calculation error in GCMSIV which could result in
    incorrect tags has been fixed.
  - Issues around Java 17 which could result in failing tests
    have been addressed.
  * Additional Features and Functionality:
  - BCJSSE: TLS 1.3 is now enabled by default where no explicit
    protocols are supplied (e.g. "TLS" or "Default" SSLContext
    algorithms, or SSLContext.getDefault() method).
  - BCJSSE: Rewrite SSLEngine implementation to improve compatibility
    with SunJSSE.
  - BCJSSE: Support export of keying material via extension API.
  - (D)TLS: Add support for 'tls-exporter' channel binding per RFC 9266.
  - (D)TLS (low-level API): By default, only (D)TLS 1.2 and TLS 1.3 are
    offered now. Earlier versions are still supported if explicitly
    enabled. Users may need to check they are offering suitable
    cipher suites for TLS 1.3.
  - (D)TLS (low-level API): Add support for raw public keys per RFC 7250.
  - CryptoServicesRegistrar now has a setServicesConstraints() method
    on it which can be used to selectively turn off algorithms.
  - The NIST PQC Alternate Candidate, Picnic, has been added to the low
    level API and the BCPQC provider.
  - SPHINCS+ has been upgraded to the latest submission, SPHINCS+ 3.1
    and support for Haraka has been added.
  - Evidence records now support timestamp renewal and hash renewal.
  - The SIKE Alternative Candidate NIST Post Quantum Algorithm has
    been added to the low-level PQC API.
  - The NTRU Round 3 Finalist Candidate NIST Post Quantum Algorithm
    has been added to the low-level API and the BCPQC provider.
  - The Falcon Finalist NIST Post Quantum Algorithm has been added to
    the low-level API and the BCPQC provider.
  - The CRYSTALS-Kyber Finalist NIST Post Quantum Algorithm has been
    added to the low-level API and the BCPQC provider.
  - Argon2 Support has been added to the OpenPGP API.
  - XDH IES has now been added to the BC provider.
  - The OpenPGP API now supports AEAD encryption and decryption.
  - The NTRU Prime Alternative Candidate NIST Post Quantum Algorithms
    have been added to the low-level API and the BCPQC provider.
  - The CRYSTALS-Dilithium Finalist NIST Post Quantum Algorithm has
    been added to the low-level API and the BCPQC provider.
  - The BIKE NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - The HQC NIST Post Quantum Alternative/Round-4 Candidate has been
    added to the low-level API and the BCPQC provider.
  - Grain128AEAD has been added to the lightweight API.
  - A fast version of CRC24 has been added for use with the PGP API.
  - Some additional methods and fields have been exposed in the
    PGPOnePassSignature class to (hopefully) make it easier to
    deal with nested signatures.
  - CMP support classes have been updated to reflect the latest
    editions to the the draft RFC "Lightweight Certificate Management
    Protocol (CMP) Profile".
  - Support has been added to the PKCS#12 implementation for the
    Oracle trusted certificate attribute.
  - Performance of our BZIP2 classes has been improved.
  * Notes:
  - Keep in mind the PQC algorithms are still under development and
    we are still at least a year and a half away from published standards.
    This means the algorithms may still change so by all means experiment,
    but do not use the PQC algoritms for anything long term.
  - The legacy "Rainbow" and "McEliece" implementations have been
    removed from the BCPQC provider. The underlying classes are
    still present if required. Other legacy algorithm implementations
    can be found under the org.bouncycastle.pqc.legacy package.
  * Security Notes:
  - The PQC SIKE algorithm is provided for research purposes only.
    It should now be regarded as broken. The SIKE implementation
    will be withdrawn in BC 1.73.
  * Rebase bouncycastle-javadoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- Update to version 1.73: [jsc#PED-3756]
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
  <changelog author="pmonreal@suse.com" date="1682424001">- Update to version 1.73:
  * Defects Fixed:
  - BCJSSE: Instantiating a JSSE provider in some contexts could
    cause an AccessControl exception.
  - The EC key pair generator can generate out of range private
    keys when used with SM2. A specific SM2KeyPairGenerator has
    been added to the low-level API and is used by
    KeyPairGenerator.getInstance("SM2", "BC"). The SM2 signer has
    been updated to check for out of range keys as well..
  - The attached signature type byte was still present in Falcon
    signatures as well as the detached signature byte.
  - There was an off-by-one error in engineGetOutputSize() for ECIES.
  - The method for invoking read() internally in BCPGInputStream
    could result in inconsistent behaviour if the class was extended.
  - Fixed a rounding issue with FF1 Format Preserving Encryption
    algorithm for certain radices.
  - Fixed RFC3394WrapEngine handling of 64 bit keys.
  - Internal buffer for blake2sp was too small and could result in
    an ArrayIndexOutOfBoundsException.
  - JCA PSS Signatures using SHAKE128 and SHAKE256 now support
    encoding of algorithm parameters.
  - PKCS10CertificationRequest now checks for empty extension
    parameters.
  - Parsing errors in the processing of PGP Armored Data now throw
    an explicit exception ArmoredInputException.
  - PGP AEAD streams could occassionally be truncated.
  - The ESTService class now supports processing of chunked HTTP data.
  - A constructed ASN.1 OCTET STRING with a single member would
    sometimes be re-encoded as a definite-length OCTET STRING. The
    encoding has been adjusted to preserve the BER status of the object.
  - PKIXCertPathReviewer could fail if the trust anchor was also
    included in the certificate store being used for path analysis.
  - UTF-8 parsing of an array range ignored the provided length.
  - IPAddress has been written to provide stricter checking and
    avoid the use of Integer.parseInt().
  - A Java 7 class snuck into the Java 5 to Java 8 build.
  * Additional Features and Functionality:
  - The Rainbow NIST Post Quantum Round-3 Candidate has been added to
    the low-level API and the BCPQC provider (level 3 and level 5
    parameter sets only).
  - The GeMSS NIST Post Quantum Round-3 Candidate has been added to
    the low-level API.
  - The org.bouncycastle.rsa.max_mr_tests property check has been
    added to allow capping of MR tests done on RSA moduli.
  - Significant performance improvements in PQC algorithms,
    especially BIKE, CMCE, Frodo, HQC, Picnic.
  - EdDSA verification now conforms to the recommendations of Taming
    the many EdDSAs, in particular cofactored verification. As a side
    benefit, Pornin's basis reduction is now used for EdDSA
    verification, giving a significant performance boost.
  - Major performance improvements for Anomalous Binary (Koblitz) Curves.
  - The lightweight Cryptography finalists Ascon, ISAP, Elephant,
    PhotonBeetle, Sparkle, and Xoodyak have been added to the
    light-weight cryptography API.
  - BLAKE2bp and BLAKE2sp have been added to the light-weight
    cryptography API.
  - Support has been added for X.509, Section 9.8, hybrid certificates
    and CRLs using alternate public keys and alternate signatures.
  - The property "org.bouncycastle.emulate.oracle" has been added to
    signal the provider should return algorithm names on some algorithms
    in the same manner as the Oracle JCE provider.
  - An extra replaceSigners method has been added to CMSSignedData
    which allows for specifying the digest algorithm IDs to be used
    in the new CMSSignedData object.
  - Parsing and re-encoding of ASN.1 PEM data has been further
    optimized to prevent unecessary conversions between basic encoding,
    definite length, and DER.
  - Support has been added for KEM ciphers in CMS in accordance with
    draft-ietf-lamps-cms-kemri
  - Support has been added for certEncr in CRMF to allow issuing of
    certificates for KEM public keys.
  - Further speedups have been made to CRC24.
  - GCMParameterSpec constructor caching has been added to improve
    performance for JVMs that have the class available.
  - The PGPEncrytedDataGenerator now supports injecting the session
    key to be used for PGP PBE encrypted data.
  - The CRMF CertificateRequestMessageBuilder now supports optional
    attributes.
  - Improvements to the s calculation in JPAKE.
  - A general purpose PQCOtherInfoGenerator has been added which
    supports all Kyber and NTRU.
  - An implementation of HPKE (RFC 9180 - Hybrid Public Key
    Encryption) has been added to the light-weight cryptography API.
  * Security Advisories:
  - The PQC implementations have now been subject to formal review for
    secret leakage and side channels, there were issues in BIKE, Falcon,
    Frodo, HQC which have now been fixed. Some weak positives also
    showed up in Rainbow, Picnic, SIKE, and GeMSS - for now this last
    set has been ignored as the algorithms will either be updated if
    they reappear in the Signature Round, or deleted, as is already the
    case for SIKE (it is now in the legacy package). Details on the
    group responsible for the testing can be found in the CONTRIBUTORS
    file.
  - For at least some ECIES variants (e.g. when using CBC) there is
    an issue with potential malleability of a nonce (implying silent
    malleability of the plaintext) that must be sent alongside the
    ciphertext but is outside the IES integrity check. For this reason
    the automatic generation of nonces with IED is now disabled and
    they have to be passed in using an IESParameterSpec. The current
    advice is to agree on a nonce between parties and then rely on the
    use of the ephemeral key component to allow the nonce (rather the
    so called nonce) usage to be extended.</changelog>
</package>
<package pkgid="9564dd456dd073ef4321deec412458007d3eee122de6a146b51a3848ccd2cb65" name="c-ares" arch="src">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="95a26cb558574bcc86b07ff62012a3f6737f8cd67d9f6efbbcc7c9933bf57950" name="c-ares-devel" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="4d5db059011620e64b27bd5e9863baaf6de6a1b07e95a41628862438557f086c" name="c-ares-devel" arch="ppc64le">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="33facca7d2ec4f8470ff998c1bbd34f7dfa723433ceaf873e5928e6d3b4998ce" name="c-ares-devel" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="80a3bf2fb8f5fbfe9219d828ce1defaa9b63f3135113e7932258f12102a09735" name="c-ares-devel" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="5c5f2455a8956815b58236cb2a572f3ca48bd0492ae5db79c3989e1bb9e71f70" name="c-ares-utils" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="e443af366f928937747520885d7a4af7db5e1a528085f3cc5510e52081537435" name="c-ares-utils" arch="ppc64le">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="9be708514ed0234ae80547704c5d5d30e888c502799d67c2ef0de848828cbf6d" name="c-ares-utils" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="5f7c2c161a560cb239f730df58d828ae4f2ff38a8ad5c7f72567c1922a5fe02d" name="c-ares-utils" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="fd6c2aa8e21f96ebb34752b6c98e98edb2b1e815b1dc9d9f0059bcffb7868950" name="cargo" arch="aarch64">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="7339381d8d067e56d16e6da3b61535c1c75c5c9b92a6e6000381acb1cb504b34" name="cargo" arch="ppc64le">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="67960a96894ee3dd191e633696754d27ad400c141cb053f809382d38f5fb1fe0" name="cargo" arch="s390x">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="83ee9c67d985a7deac3e34e700260a90e692882dd7a419593fc6f4838c48b610" name="cargo" arch="x86_64">
  <version epoch="0" ver="1.70.0" rel="150400.24.18.1"/>
  <changelog author="william.brown@suse.com" date="1635163200">- Remove rls/gdb as they are superceded by rustup</changelog>
  <changelog author="william.brown@suse.com" date="1636372800">- Update to version 1.56.1</changelog>
  <changelog author="william.brown@suse.com" date="1638532800">- Update to version 1.57.0</changelog>
  <changelog author="william.brown@suse.com" date="1642161600">- Update to version 1.58.0</changelog>
  <changelog author="dimstar@opensuse.org" date="1642420800">- Provide rust+cargo by cargo: all cargo&lt;n&gt; package provide this
  symbol too. Having the meta package provide it allows OBS to have
  a generic prefernece on the meta package for all packages 'just'
  requiring rust+cargo.</changelog>
  <changelog author="william.brown@suse.com" date="1645012800">- Update package description to help users choose what tooling
  to install.</changelog>
  <changelog author="william.brown@suse.com" date="1645790400">- Update to version 1.59.0 - for details see the rust1.59 package</changelog>
  <changelog author="william.brown@suse.com" date="1649419200">- Update to version 1.60.0 - for details see the rust1.60 package</changelog>
  <changelog author="william.brown@suse.com" date="1653048000">- Update to version 1.61.0 - for details see the rust1.61 package</changelog>
  <changelog author="william.brown@suse.com" date="1656936000">- Update to version 1.62.0 - for details see the rust1.62 package</changelog>
  <changelog author="william.brown@suse.com" date="1661256000">- Update to version 1.63.0 - for details see the rust1.63 package</changelog>
  <changelog author="william.brown@suse.com" date="1664107200">- Update to version 1.64.0 - for details see the rust1.64 package</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1664366400">- Enable armv6 again - boo#1196328</changelog>
  <changelog author="william.brown@suse.com" date="1667563200">- Update to version 1.65.0 - for details see the rust1.65 package</changelog>
  <changelog author="william.brown@suse.com" date="1671192000">- Update to version 1.66.0 - for details see the rust1.66 package</changelog>
  <changelog author="william.brown@suse.com" date="1675166400">- Update to version 1.67.0 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1676376000">- Update to version 1.67.1 - for details see the rust1.67 package</changelog>
  <changelog author="william.brown@suse.com" date="1678449600">- Update to version 1.68.0 - for details see the rust1.68 package</changelog>
  <changelog author="william.brown@suse.com" date="1682078400">- Update to version 1.69.0 - for details see the rust1.69 package</changelog>
  <changelog author="william.brown@suse.com" date="1685793600">- Update to version 1.70.0 - for details see the rust1.70 package</changelog>
</package>
<package pkgid="b850b45860086181a11311c20d2be5ce9ecf59367ecb7202a71898d89f9d9ab7" name="cargo1.70" arch="aarch64">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="3caf535498f3399e6dd4a82c7bfb5e80a3c3a8b193791a9cacf823434b7251e8" name="cargo1.70" arch="ppc64le">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="1a187554b599705e6b27e4789ff2e3573401d6fb0c7310e42e0fc27057c4b43a" name="cargo1.70" arch="s390x">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="9e8ee78a8b837c96197c0f0f2c2c5545acdc33b3a16168f31a3e4b7fa08e024d" name="cargo1.70" arch="x86_64">
  <version epoch="0" ver="1.70.0" rel="150400.9.3.1"/>
  <changelog author="william.brown@suse.com" date="1685793600">Version 1.70.0 (2023-06-01)
  Language
--------
- [Relax ordering rules for `asm!` operands](https://github.com/rust-lang/rust/pull/105798/)
- [Properly allow macro expanded `format_args` invocations to uses captures](https://github.com/rust-lang/rust/pull/106505/)
- [Lint ambiguous glob re-exports](https://github.com/rust-lang/rust/pull/107880/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
  Compiler
--------
- [Extend -Cdebuginfo with new options and named aliases](https://github.com/rust-lang/rust/pull/109808/)
  This provides a smaller version of debuginfo for cases that only need line number information
  (`-Cdebuginfo=line-tables-only`), which may eventually become the default for `-Cdebuginfo=1`.
- [Make `unused_allocation` lint against `Box::new` too](https://github.com/rust-lang/rust/pull/104363/)
- [Detect uninhabited types early in const eval](https://github.com/rust-lang/rust/pull/109435/)
- [Switch to LLD as default linker for {arm,thumb}v4t-none-eabi](https://github.com/rust-lang/rust/pull/109721/)
- [Add tier 3 target `loongarch64-unknown-linux-gnu`](https://github.com/rust-lang/rust/pull/96971)
- [Add tier 3 target for `i586-pc-nto-qnx700` (QNX Neutrino RTOS, version 7.0)](https://github.com/rust-lang/rust/pull/109173/),
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.
  Refer to Rust's [platform support page][platform-support-doc]
  for more information on Rust's tiered platform support.
  Libraries
---------
- [Document NonZeroXxx layout guarantees](https://github.com/rust-lang/rust/pull/94786/)
- [Windows: make `Command` prefer non-verbatim paths](https://github.com/rust-lang/rust/pull/96391/)
- [Implement Default for some alloc/core iterators](https://github.com/rust-lang/rust/pull/99929/)
- [Fix handling of trailing bare CR in str::lines](https://github.com/rust-lang/rust/pull/100311/)
- [allow negative numeric literals in `concat!`](https://github.com/rust-lang/rust/pull/106844/)
- [Add documentation about the memory layout of `Cell`](https://github.com/rust-lang/rust/pull/106921/)
- [Use `partial_cmp` to implement tuple `lt`/`le`/`ge`/`gt`](https://github.com/rust-lang/rust/pull/108157/)
- [Stabilize `atomic_as_ptr`](https://github.com/rust-lang/rust/pull/108419/)
- [Stabilize `nonnull_slice_from_raw_parts`](https://github.com/rust-lang/rust/pull/97506/)
- [Partial stabilization of `once_cell`](https://github.com/rust-lang/rust/pull/105587/)
- [Stabilize `nonzero_min_max`](https://github.com/rust-lang/rust/pull/106633/)
- [Flatten/inline format_args!() and (string and int) literal arguments into format_args!()](https://github.com/rust-lang/rust/pull/106824/)
- [Stabilize movbe target feature](https://github.com/rust-lang/rust/pull/107711/)
- [don't splice from files into pipes in io::copy](https://github.com/rust-lang/rust/pull/108283/)
- [Add a builtin unstable `FnPtr` trait that is implemented for all function pointers](https://github.com/rust-lang/rust/pull/108080/)
  This extends `Debug`, `Pointer`, `Hash`, `PartialEq`, `Eq`, `PartialOrd`, and `Ord`
  implementations for function pointers with all ABIs.
  Stabilized APIs
- [`NonZero*::MIN/MAX`](https://doc.rust-lang.org/stable/std/num/struct.NonZeroI8.html#associatedconstant.MIN)
- [`BinaryHeap::retain`](https://doc.rust-lang.org/stable/std/collections/struct.BinaryHeap.html#method.retain)
- [`Default for std::collections::binary_heap::IntoIter`](https://doc.rust-lang.org/stable/std/collections/binary_heap/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoIter.html)
- [`Default for std::collections::btree_map::{IntoKeys, Keys}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::{IntoValues, Values}`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.IntoKeys.html)
- [`Default for std::collections::btree_map::Range`](https://doc.rust-lang.org/stable/std/collections/btree_map/struct.Range.html)
- [`Default for std::collections::btree_set::{IntoIter, Iter}`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.IntoIter.html)
- [`Default for std::collections::btree_set::Range`](https://doc.rust-lang.org/stable/std/collections/btree_set/struct.Range.html)
- [`Default for std::collections::linked_list::{IntoIter, Iter, IterMut}`](https://doc.rust-lang.org/stable/alloc/collections/linked_list/struct.IntoIter.html)
- [`Default for std::vec::IntoIter`](https://doc.rust-lang.org/stable/alloc/vec/struct.IntoIter.html#impl-Default-for-IntoIter%3CT,+A%3E)
- [`Default for std::iter::Chain`](https://doc.rust-lang.org/stable/std/iter/struct.Chain.html)
- [`Default for std::iter::Cloned`](https://doc.rust-lang.org/stable/std/iter/struct.Cloned.html)
- [`Default for std::iter::Copied`](https://doc.rust-lang.org/stable/std/iter/struct.Copied.html)
- [`Default for std::iter::Enumerate`](https://doc.rust-lang.org/stable/std/iter/struct.Enumerate.html)
- [`Default for std::iter::Flatten`](https://doc.rust-lang.org/stable/std/iter/struct.Flatten.html)
- [`Default for std::iter::Fuse`](https://doc.rust-lang.org/stable/std/iter/struct.Fuse.html)
- [`Default for std::iter::Rev`](https://doc.rust-lang.org/stable/std/iter/struct.Rev.html)
- [`Default for std::slice::Iter`](https://doc.rust-lang.org/stable/std/slice/struct.Iter.html)
- [`Default for std::slice::IterMut`](https://doc.rust-lang.org/stable/std/slice/struct.IterMut.html)
- [`Rc::into_inner`](https://doc.rust-lang.org/stable/alloc/rc/struct.Rc.html#method.into_inner)
- [`Arc::into_inner`](https://doc.rust-lang.org/stable/alloc/sync/struct.Arc.html#method.into_inner)
- [`std::cell::OnceCell`](https://doc.rust-lang.org/stable/std/cell/struct.OnceCell.html)
- [`Option::is_some_and`](https://doc.rust-lang.org/stable/std/option/enum.Option.html#method.is_some_and)
- [`NonNull::slice_from_raw_parts`](https://doc.rust-lang.org/stable/std/ptr/struct.NonNull.html#method.slice_from_raw_parts)
- [`Result::is_ok_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_ok_and)
- [`Result::is_err_and`](https://doc.rust-lang.org/stable/std/result/enum.Result.html#method.is_err_and)
- [`std::sync::atomic::Atomic*::as_ptr`](https://doc.rust-lang.org/stable/std/sync/atomic/struct.AtomicU8.html#method.as_ptr)
- [`std::io::IsTerminal`](https://doc.rust-lang.org/stable/std/io/trait.IsTerminal.html)
- [`std::os::linux::net::SocketAddrExt`](https://doc.rust-lang.org/stable/std/os/linux/net/trait.SocketAddrExt.html)
- [`std::os::unix::net::UnixDatagram::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.bind_addr)
- [`std::os::unix::net::UnixDatagram::connect_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.connect_addr)
- [`std::os::unix::net::UnixDatagram::send_to_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixDatagram.html#method.send_to_addr)
- [`std::os::unix::net::UnixListener::bind_addr`](https://doc.rust-lang.org/stable/std/os/unix/net/struct.UnixListener.html#method.bind_addr)
- [`std::path::Path::as_mut_os_str`](https://doc.rust-lang.org/stable/std/path/struct.Path.html#method.as_mut_os_str)
- [`std::sync::OnceLock`](https://doc.rust-lang.org/stable/std/sync/struct.OnceLock.html)
  Cargo
-----
- [Add `CARGO_PKG_README`](https://github.com/rust-lang/cargo/pull/11645/)
- [Make `sparse` the default protocol for crates.io](https://github.com/rust-lang/cargo/pull/11791/)
- [Accurately show status when downgrading dependencies](https://github.com/rust-lang/cargo/pull/11839/)
- [Use registry.default for login/logout](https://github.com/rust-lang/cargo/pull/11949/)
- [Stabilize `cargo logout`](https://github.com/rust-lang/cargo/pull/11950/)
  Misc
----
- [Stabilize rustdoc `--test-run-directory`](https://github.com/rust-lang/rust/pull/103682/)
  Compatibility Notes
- [Prevent stable `libtest` from supporting `-Zunstable-options`](https://github.com/rust-lang/rust/pull/109044/)
- [Perform const and unsafe checking for expressions in `let _ = expr` position.](https://github.com/rust-lang/rust/pull/102256/)
- [WebAssembly targets enable `sign-ext` and `mutable-globals` features in codegen](https://github.com/rust-lang/rust/issues/109807)
  This may cause incompatibility with older execution environments.
- [Insert alignment checks for pointer dereferences as debug assertions](https://github.com/rust-lang/rust/pull/98112)
  This catches undefined behavior at runtime, and may cause existing code to fail.</changelog>
</package>
<package pkgid="398b69741fa11385700c0a2c15062a809bd98ed54c6ae553366a854b81715afd" name="clingo" arch="aarch64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="c36153a3ccaf654e6169bd00ad62454ee83c6b1d9fe0f7744b18759608d2699a" name="clingo" arch="ppc64le">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="0ed2b7d64503bf1adf2edd05a54977ae6ef1d89b5bc78eb39e869adbd3d6370f" name="clingo" arch="s390x">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="f56b9e6aae3392b1bc267342388169c318eb9356b0ba8a06bfa24a3f4971f895" name="clingo" arch="src">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="844ffa128a88ebf830ad24cdbe9a305bafbfddc5262d25934534b9b6caab84b9" name="clingo" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="bb317e3c6c20717dbd4fdc4468d30b1c445cb1cecccb9a10920d5532e8dda8b5" name="clingo-devel" arch="aarch64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="8b02ffd6aa9040b9a888e56f41079435e45d63c52e4cebc06acddd9918920e19" name="clingo-devel" arch="ppc64le">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="762cb2354d82f5b1284d3a032c9be20a5bfd16806ab9211be33c6e807c2d4f3f" name="clingo-devel" arch="s390x">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="bd28acd4874f2b99498dd54cab30af45d12c54b39acace0e4a6218df19fcd905" name="clingo-devel" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="3f911f119b354e0ad0911ad7da1bd155bea5d8f10cf12dd0a854d4d5934b302d" name="cloud-init" arch="aarch64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="c2787c82455d0f92b54b1b86ca39afb318ef2b7aff3ccbd093f4cdb71aadb0a2" name="cloud-init" arch="ppc64le">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="b618634652b156a122cc645675af1ac06ec3aa8e369c349c9abad71428f9604b" name="cloud-init" arch="s390x">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="9b53bef8b442b2ab8dd4f1183e8cc9ccd03a78acf0d4be4a01000ac91a9a3035" name="cloud-init" arch="src">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="0c434f47f4944c21792d47c4b852f210ead862db9a90dc37362f2a65effd31f5" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="f72c35bce766d4255a406dca70342a685fefe763186a29241db8bee26febbcc0" name="cloud-init-config-suse" arch="aarch64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="4a28238ce089675e471a252b669b206f2e23de27b2ca78c118d3da32c4ce27f3" name="cloud-init-config-suse" arch="ppc64le">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="6001c63fac48ca52aa5f6f3753abbcfb8c3001899b5ee399bd6adede861f8136" name="cloud-init-config-suse" arch="s390x">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="957da3685b28118b198ab8276fbfa83a511c5207b4d4b4dc94c8029b10770256" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="7551f9684cae92de2480488cb13354b69b5ba336d79d51007710e1785a41d0e5" name="cloud-init-doc" arch="aarch64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="3753815df3ed04f6ee0070653e43d805a31aee2811f89ad037c8de8451dc42dc" name="cloud-init-doc" arch="ppc64le">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="c1570f35ec44e6f375891ce69aa29ef5907a5281959f1ff786a0309b3bfe89ad" name="cloud-init-doc" arch="s390x">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="bc2630a948cb7bdbede0c4d4530ae6e01ba61875339476e6e14c3a3cd9e2298c" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="23.1" rel="150100.8.63.5"/>
  <changelog author="rjschwei@suse.com" date="1605009600">- Update cloud-init-write-routes.patch (bsc#1177526)
  + Fix missing default route when dual stack network setup is used. Once
    a default route was configured for Ipv6 or IPv4 the default route
    configuration for the othre protocol was skipped.</changelog>
  <changelog author="rjschwei@suse.com" date="1605268800">- Patch the full package version into the cloud-init version file</changelog>
  <changelog author="rjschwei@suse.com" date="1606219200">- Add cloud-init-azure-def-usr-pass.patch (bsc#1179150, bsc#1179151)
  + Properly set the password for the default user in all circumstances</changelog>
  <changelog author="rjschwei@suse.com" date="1606219201">- Add wget as a requirement (bsc#1178029)
  + wget is used in the CloudStack data source</changelog>
  <changelog author="rjschwei@suse.com" date="1609761600">- Add cloud-init-sle12-compat.patch (jsc#PM-2335)
  - Python 3.4 compatibility in setup.py
  - Disable some test for mock version compatibility</changelog>
  <changelog author="rjschwei@suse.com" date="1609761601">- Update cloud-init-write-routes.patch (bsc#1180176)
  + Follow up to previous changes. Fix order of operations
    error to make gateway comparison between subnet configuration and
    route configuration valuable rather than self-comparing.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1611316800">- Add use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)
  - Do not including sudoers.d directory twice</changelog>
  <changelog author="rjschwei@suse.com" date="1617796800">- Add cloud-init-bonding-opts.patch (bsc#1184085)
  + Write proper bonding option configuration for SLE/openSUSE
- Fix application and inclusion of
  use_arroba_to_include_sudoers_directory-bsc_1181283.patchfix (bsc#1181283)</changelog>
  <changelog author="rjschwei@suse.com" date="1622635200">- Add cloud-init-log-file-mode.patch (bsc#1183939)
  + Change log file creation mode to 640
- Add cloud-init-no-pwd-in-log.patch (bsc#1184758)
  + Do not write the generated password to the log file
- Add cloud-init-purge-cache-py-ver-change.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1625832000">- Add patch from upstream to remove python2 compatibility so
  cloud-init builds fine in Tumbleweed with a recent Jinja2
  version. This patch is only applied in TW.
  * 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch</changelog>
  <changelog author="qydwhotmail@gmail.com" date="1628769600">- Add cloud-init-update-test-characters-in-substitution-unit-test.patch
  to fix unit test fail in TestGetPackageMirrorInfo::test_substitution.</changelog>
  <changelog author="rjschwei@suse.com" date="1628769601">- Update to version 21.2 (bsc#1186004)
  + Remove patches included upstream:
  - cloud-init-azure-def-usr-pass.patch
  - cloud-init-after-kvp.diff
  - cloud-init-recognize-hpc.patch
  - use_arroba_to_include_sudoers_directory-bsc_1181283.patch
  - cloud-init-bonding-opts.patch
  - cloud-init-log-file-mode.patch
  - cloud-init-no-pwd-in-log.patch
  - 0001-templater-drop-Jinja-Python-2-compatibility-shim.patch
  + Remove cloud-init-sle12-compat.patch, version in SLE 12 is frozen to 20.2
  + Remove cloud-init-tests-set-exec.patch no longer needed
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  +  Add \r\n check for SSH keys in Azure (#889)
  +  Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    (LP: #1922742)
  +  Add Vultaire as contributor (#881) [Paul Goins]
  +  Azure: adding support for consuming userdata from IMDS (#884) [Anh Vo]
  +  test_upgrade: modify test_upgrade_package to run for more sources (#883)
  +  Fix chef module run failure when chef_license is set (#868) [Ben Hughes]
  +  Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    [aswinrajamannar]
  +  Azure: Retrieve username and hostname from IMDS (#865) [Thomas Stringer]
  +  Azure: eject the provisioning iso before reporting ready (#861) [Anh Vo]
  +  Use `partprobe` to re-read partition table if available (#856)
    [Nicolas Bock] (LP: #1920939)
  +  fix error on upgrade caused by new vendordata2 attributes (#869)
    (LP: #1922739)
  +  add prefer_fqdn_over_hostname config option (#859)
    [hamalq] (LP: #1921004)
  +  Emit dots on travis to avoid timeout (#867)
  +  doc: Replace remaining references to user-scripts as a config module
    (#866) [Ryan Harper]
  +  azure: Removing ability to invoke walinuxagent (#799) [Anh Vo]
  +  Add Vultr support (#827) [David Dymko]
  +  Fix unpickle for source paths missing run_dir (#863)
    [lucasmoura] (LP: #1899299)
  +  sysconfig: use BONDING_MODULE_OPTS on SUSE (#831) [Jens Sandmann]
  +  bringup_static_routes: fix gateway check (#850) [Petr Fedchenkov]
  +  add hamalq user (#860) [hamalq]
  +  Add support to resize rootfs if using LVM (#721)
    [Eduardo Otubo] (LP: #1799953)
  +  Fix mis-detecting network configuration in initramfs cmdline (#844)
    (LP: #1919188)
  +  tools/write-ssh-key-fingerprints: do not display empty header/footer
    (#817) [dermotbradley]
  +  Azure helper: Ensure Azure http handler sleeps between retries (#842)
    [Johnson Shi]
  +  Fix chef apt source example (#826) [timothegenzmer]
  +  .travis.yml: generate an SSH key before running tests (#848)
  +  write passwords only to serial console, lock down cloud-init-output.log
    (#847) (LP: #1918303)
  +  Fix apt default integration test (#845)
  +  integration_tests: bump pycloudlib dependency (#846)
  +  Fix stack trace if vendordata_raw contained an array (#837) [eb3095]
  +  archlinux: Fix broken locale logic (#841)
    [Kristian Klausen] (LP: #1402406)
  +  Integration test for #783 (#832)
  +  integration_tests: mount more paths IN_PLACE (#838)
  +  Fix requiring device-number on EC2 derivatives (#836) (LP: #1917875)
  +  Remove the vi comment from the part-handler example (#835)
  +  net: exclude OVS internal interfaces in get_interfaces (#829)
    (LP: #1912844)
  +  tox.ini: pass OS_* environment variables to integration tests (#830)
  +  integration_tests: add OpenStack as a platform (#804)
  +  Add flexibility to IMDS api-version (#793) [Thomas Stringer]
  +  Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    [Paride Legovini] (LP: #1916629)
  +  doc: remove duplicate "it" from nocloud.rst (#825) [V.I. Wood]
  +  archlinux: Use hostnamectl to set the transient hostname (#797)
    [Kristian Klausen]
  +  cc_keys_to_console.py: Add documentation for recently added config key
    (#824) [dermotbradley]
  +  Update cc_set_hostname documentation (#818) [Toshi Aoyama]
  From 21.1
  +  Azure: Support for VMs without ephemeral resource disks. (#800)
    [Johnson Shi] (LP: #1901011)
  +  cc_keys_to_console: add option to disable key emission (#811)
    [Michael Hudson-Doyle] (LP: #1915460)
  +  integration_tests: introduce lxd_use_exec mark (#802)
  +  azure: case-insensitive UUID to avoid new IID during kernel upgrade
    (#798) (LP: #1835584)
  +  stale.yml: don't ask submitters to reopen PRs (#816)
  +  integration_tests: fix use of SSH agent within tox (#815)
  +  integration_tests: add UPGRADE CloudInitSource (#812)
  +  integration_tests: use unique MAC addresses for tests (#813)
  +  Update .gitignore (#814)
  +  Port apt cloud_tests to integration tests (#808)
  +  integration_tests: fix test_gh626 on LXD VMs (#809)
  +  Fix attempting to decode binary data in test_seed_random_data test (#806)
  +  Remove wait argument from tests with session_cloud calls (#805)
  +  Datasource for UpCloud (#743) [Antti Myyrä]
  +  test_gh668: fix failure on LXD VMs (#801)
  +  openstack: read the dynamic metadata group vendor_data2.json (#777)
    [Andrew Bogott] (LP: #1841104)
  +  includedir in suoders can be prefixed by "arroba" (#783)
    [Jordi Massaguer Pla]
  +  [VMware] change default max wait time to 15s (#774) [xiaofengw-vmware]
  +  Revert integration test associated with reverted #586 (#784)
  +  Add jordimassaguerpla as contributor (#787) [Jordi Massaguer Pla]
  +  Add Rick Harding to CLA signers (#792) [Rick Harding]
  +  HACKING.rst: add clarifying note to LP CLA process section (#789)
  +  Stop linting cloud_tests (#791)
  +  cloud-tests: update cryptography requirement (#790) [Joshua Powers]
  +  Remove 'remove-raise-on-failure' calls from integration_tests (#788)
  +  Use more cloud defaults in integration tests (#757)
  +  Adding self to cla signers (#776) [Andrew Bogott]
  +  doc: avoid two warnings (#781) [Dan Kenigsberg]
  +  Use proper spelling for Red Hat (#778) [Dan Kenigsberg]
  +  Add antonyc to .github-cla-signers (#747) [Anton Chaporgin]
  +  integration_tests: log image serial if available (#772)
  +  [VMware] Support cloudinit raw data feature (#691) [xiaofengw-vmware]
  +  net: Fix static routes to host in eni renderer (#668) [Pavel Abalikhin]
  +  .travis.yml: don't run cloud_tests in CI (#756)
  +  test_upgrade: add some missing commas (#769)
  +  cc_seed_random: update documentation and fix integration test (#771)
    (LP: #1911227)
  +  Fix test gh-632 test to only run on NoCloud (#770) (LP: #1911230)
  +  archlinux: fix package upgrade command handling (#768) [Bao Trinh]
  +  integration_tests: add integration test for LP: #1910835 (#761)
  +  Fix regression with handling of IMDS ssh keys (#760) [Thomas Stringer]
  +  integration_tests: log cloud-init version in SUT (#758)
  +  Add ajmyyra as contributor (#742) [Antti Myyrä]
  +  net_convert: add some missing help text (#755)
  +  Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL
    (#753) [Eduardo Otubo]
  +  doc: document missing IPv6 subnet types (#744) [Antti Myyrä]
  +  Add example configuration for datasource `AliYun` (#751) [Xiaoyu Zhong]
  +  integration_tests: add SSH key selection settings (#754)
  +  fix a typo in man page cloud-init.1 (#752) [Amy Chen]
  +  network-config-format-v2.rst: add Netplan Passthrough section (#750)
  +  stale: re-enable post holidays (#749)
  +  integration_tests: port ca_certs tests from cloud_tests (#732)
  +  Azure: Add telemetry for poll IMDS (#741) [Johnson Shi]
  +  doc: move testing section from HACKING to its own doc (#739)
  +  No longer allow integration test failures on travis (#738)
  +  stale: fix error in definition (#740)
  +  integration_tests: set log-cli-level to INFO by default (#737)
  +  PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
  +  stale: disable check for holiday break (#735)
  +  integration_tests: log the path we collect logs into (#733)
  +  .travis.yml: add (most) supported Python versions to CI (#734)
  +  integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
  +  cc_ca_certs: add RHEL support (#633) [cawamata]
  +  Azure: only generate config for NICs with addresses (#709)
    [Thomas Stringer]
  +  doc: fix CloudStack configuration example (#707) [Olivier Lemasle]
  +  integration_tests: restrict test_lxd_bridge appropriately (#730)
  +  Add integration tests for CLI functionality (#729)
  +  Integration test for gh-626 (#728)
  +  Some test_upgrade fixes (#726)
  +  Ensure overriding test vars with env vars works for booleans (#727)
  +  integration_tests: port lxd_bridge test from cloud_tests (#718)
  +  Integration test for gh-632. (#725)
  +  Integration test for gh-671 (#724)
  +  integration-requirements.txt: bump pycloudlib commit (#723)
  +  Drop unnecessary shebang from cmd/main.py (#722) [Eduardo Otubo]
  +  Integration test for LP: #1813396 and #669 (#719)
  +  integration_tests: include timestamp in log output (#720)
  +  integration_tests: add test for LP: #1898997 (#713)
  +  Add integration test for power_state_change module (#717)
  +  Update documentation for network-config-format-v2 (#701) [ggiesen]
  +  sandbox CA Cert tests to not require ca-certificates (#715)
    [Eduardo Otubo]
  +  Add upgrade integration test (#693)
  +  Integration test for 570 (#712)
  +  Add ability to keep snapshotted images in integration tests (#711)
  +  Integration test for pull #586 (#706)
  +  integration_tests: introduce skipping of tests by OS (#702)
  +  integration_tests: introduce IntegrationInstance.restart (#708)
  +  Add lxd-vm to list of valid integration test platforms (#705)
  +  Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL
    (#685) [Eduardo Otubo]
  +  Delete image snapshots created for integration tests (#682)
  +  Parametrize ssh_keys_provided integration test (#700) [lucasmoura]
  +  Drop use_sudo attribute on IntegrationInstance (#694) [lucasmoura]
  +  cc_apt_configure: add riscv64 as a ports arch (#687)
    [Dimitri John Ledkov]
  +  cla: add xnox (#692) [Dimitri John Ledkov]
  +  Collect logs from integration test runs (#675)
  From 20.4.1
  +  Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
  From 20.4
  +  tox: avoid tox testenv subsvars for xenial support (#684)
  +  Ensure proper root permissions in integration tests (#664) [James Falcon]
  +  LXD VM support in integration tests (#678) [James Falcon]
  +  Integration test for fallocate falling back to dd (#681) [James Falcon]
  +  .travis.yml: correctly integration test the built .deb (#683)
  +  Ability to hot-attach NICs to preprovisioned VMs before reprovisioning
    (#613) [aswinrajamannar]
  +  Support configuring SSH host certificates. (#660) [Jonathan Lung]
  +  add integration test for LP: #1900837 (#679)
  +  cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    [Mina Galić] (LP: #1901958, #1901958)
  +  DataSourceAzure: push dmesg log to KVP (#670) [Anh Vo]
  +  Make mount in place for tests work (#667) [James Falcon]
  +  integration_tests: restore emission of settings to log (#657)
  +  DataSourceAzure: update password for defuser if exists (#671) [Anh Vo]
  +  tox.ini: only select "ci" marked tests for CI runs (#677)
  +  Azure helper: Increase Azure Endpoint HTTP retries (#619) [Johnson Shi]
  +  DataSourceAzure: send failure signal on Azure datasource failure (#594)
    [Johnson Shi]
  +  test_persistence: simplify VersionIsPoppedFromState (#674)
  +  only run a subset of integration tests in CI (#672)
  +  cli: add  + -system param to allow validating system user-data on a
    machine (#575)
  +  test_persistence: add VersionIsPoppedFromState test (#673)
  +  introduce an upgrade framework and related testing (#659)
  +  add  + -no-tty option to gpg (#669) [Till Riedel] (LP: #1813396)
  +  Pin pycloudlib to a working commit (#666) [James Falcon]
  +  DataSourceOpenNebula: exclude SRANDOM from context output (#665)
  +  cloud_tests: add hirsute release definition (#662)
  +  split integration and cloud_tests requirements (#652)
  +  faq.rst: add warning to answer that suggests running `clean` (#661)
  +  Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    [Scott Moser]
  +  Make wakeonlan Network Config v2 setting actually work (#626)
    [dermotbradley]
  +  HACKING.md: unify network-refactoring namespace (#658) [Mina Galić]
  +  replace usage of dmidecode with kenv on FreeBSD (#621) [Mina Galić]
  +  Prevent timeout on travis integration tests. (#651) [James Falcon]
  +  azure: enable pushing the log to KVP from the last pushed byte  (#614)
    [Moustafa Moustafa]
  +  Fix launch_kwargs bug in integration tests (#654) [James Falcon]
  +  split read_fs_info into linux &amp; freebsd parts (#625) [Mina Galić]
  +  PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
  +  Make some language improvements in growpart documentation (#649)
    [Shane Frasier]
  +  Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
  +  Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    [WebSpider]
  +  remove unnecessary reboot from gpart resize (#646) [Mina Galić]
  +  cloudinit: move dmi functions out of util (#622) [Scott Moser]
  +  integration_tests: various launch improvements (#638)
  +  test_lp1886531: don't assume /etc/fstab exists (#639)
  +  Remove Ubuntu restriction from PR template (#648) [James Falcon]
  +  util: fix mounting of vfat on *BSD (#637) [Mina Galić]
  +  conftest: improve docstring for disable_subp_usage (#644)
  +  doc: add example query commands to debug Jinja templates (#645)
  +  Correct documentation and testcase data for some user-data YAML (#618)
    [dermotbradley]
  +  Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    [Markus Schade]
  +  .travis.yml: use a known-working version of lxd (#643)
  +  tools/build-on-freebsd: fix comment explaining purpose of the script
    (#635) [Mina Galić]
  +  Hetzner: initialize instance_id from system-serial-number (#630)
    [Markus Schade] (LP: #1885527)
  +  Explicit set IPV6_AUTOCONF and IPV6_FORCE_ACCEPT_RA on static6 (#634)
    [Eduardo Otubo]
  +  get_interfaces: don't exclude Open vSwitch bridge/bond members (#608)
    [Lukas Märdian] (LP: #1898997)
  +  Add config modules for controlling IBM PowerVM RMC. (#584)
    [Aman306] (LP: #1895979)
  +  Update network config docs to clarify MAC address quoting (#623)
    [dermotbradley]
  +  gentoo: fix hostname rendering when value has a comment (#611)
    [Manuel Aguilera]
  +  refactor integration testing infrastructure (#610) [James Falcon]
  +  stages: don't reset permissions of cloud-init.log every boot (#624)
    (LP: #1900837)
  +  docs: Add how to use cloud-localds to boot qemu (#617) [Joshua Powers]
  +  Drop vestigial update_resolve_conf_file function (#620) [Scott Moser]
  +  cc_mounts: correctly fallback to dd if fallocate fails (#585)
    (LP: #1897099)
  +  .travis.yml: add integration-tests to Travis matrix (#600)
  +  ssh_util: handle non-default AuthorizedKeysFile config (#586)
    [Eduardo Otubo]
  +  Multiple file fix for AuthorizedKeysFile config (#60) [Eduardo Otubo]
  +  bddeb: new  + -packaging-branch argument to pull packaging from branch
    (#576) [Paride Legovini]
  +  Add more integration tests (#615) [lucasmoura]
  +  DataSourceAzure: write marker file after report ready in preprovisioning
    (#590) [Johnson Shi]
  +  integration_tests: emit settings to log during setup (#601)
  +  integration_tests: implement citest tests run in Travis (#605)
  +  Add Azure support to integration test framework (#604) [James Falcon]
  +  openstack: consider product_name as valid chassis tag (#580)
    [Adrian Vladu] (LP: #1895976)
  +  azure: clean up and refactor report_diagnostic_event (#563) [Johnson Shi]
  +  net: add the ability to blacklist network interfaces based on driver
    during enumeration of physical network devices (#591) [Anh Vo]
  +  integration_tests: don't error on cloud-init failure (#596)
  +  integration_tests: improve cloud-init.log assertions (#593)
  +  conftest.py: remove top-level import of httpretty (#599)
  +  tox.ini: add integration-tests testenv definition (#595)
  +  PULL_REQUEST_TEMPLATE.md: empty checkboxes need a space (#597)
  +  add integration test for LP: #1886531 (#592)
  +  Initial implementation of integration testing infrastructure (#581)
    [James Falcon]
  +  Fix name of ntp and chrony service on CentOS and RHEL. (#589)
    [Scott Moser] (LP: #1897915)
  +  Adding a PR template (#587) [James Falcon]
  +  Azure parse_network_config uses fallback cfg when generate IMDS network
    cfg fails (#549) [Johnson Shi]
  +  features: refresh docs for easier out-of-context reading (#582)
  +  Fix typo in resolv_conf module's description (#578) [Wacław Schiller]
  +  cc_users_groups: minor doc formatting fix (#577)
  +  Fix typo in disk_setup module's description (#579) [Wacław Schiller]
  +  Add vendor-data support to seedfrom parameter for NoCloud and OVF (#570)
    [Johann Queuniet]
  +  boot.rst: add First Boot Determination section (#568) (LP: #1888858)
  +  opennebula.rst: minor readability improvements (#573) [Mina Galić]
  +  cloudinit: remove unused LOG variables (#574)
  +  create a shutdown_command method in distro classes (#567)
    [Emmanuel Thomé]
  +  user_data: remove unused constant (#566)
  +  network: Fix type and respect name when rendering vlan in
    sysconfig. (#541) [Eduardo Otubo] (LP: #1788915, #1826608)
  +  Retrieve SSH keys from IMDS first with OVF as a fallback (#509)
    [Thomas Stringer]
  +  Add jqueuniet as contributor (#569) [Johann Queuniet]
  +  distros: minor typo fix (#562)
  +  Bump the integration-requirements versioned dependencies (#565)
    [Paride Legovini]
  +  network-config-format-v1: fix typo in nameserver example (#564)
    [Stanislas]
  +  Run cloud-init-local.service after the hv_kvp_daemon (#505)
    [Robert Schweikert]
  +  Add method type hints for Azure helper (#540) [Johnson Shi]
  +  systemd: add Before=shutdown.target when Conflicts=shutdown.target is
    used (#546) [Paride Legovini]
  +  LXD: detach network from profile before deleting it (#542)
    [Paride Legovini] (LP: #1776958)
  +  redhat spec: add missing BuildRequires (#552) [Paride Legovini]
  +  util: remove debug statement (#556) [Joshua Powers]
  +  Fix cloud config on chef example (#551) [lucasmoura]
  From 20.3
  +  Azure: Add netplan driver filter when using hv_netvsc driver (#539)
    [James Falcon] (LP: #1830740)
  +  query: do not handle non-decodable non-gzipped content (#543)
  +  DHCP sandboxing failing on noexec mounted /var/tmp (#521) [Eduardo Otubo]
  +  Update the list of valid ssh keys. (#487)
    [Ole-Martin Bratteng] (LP: #1877869)
  +  cmd: cloud-init query to handle compressed userdata (#516) (LP: #1889938)
  +  Pushing cloud-init log to the KVP (#529) [Moustafa Moustafa]
  +  Add Alpine Linux support. (#535) [dermotbradley]
  +  Detect kernel version before swap file creation (#428) [Eduardo Otubo]
  +  cli: add devel make-mime subcommand (#518)
  +  user-data: only verify mime-types for TYPE_NEEDED and x-shellscript
    (#511) (LP: #1888822)
  +  DataSourceOracle: retry twice (and document why we retry at all) (#536)
  +  Refactor Azure report ready code (#468) [Johnson Shi]
  +  tox.ini: pin correct version of httpretty in xenial{,-dev} envs (#531)
  +  Support Oracle IMDSv2 API (#528) [James Falcon]
  +  .travis.yml: run a doc build during CI (#534)
  +  doc/rtd/topics/datasources/ovf.rst: fix doc8 errors (#533)
  +  Fix 'Users and Groups' configuration documentation (#530) [sshedi]
  +  cloudinit.distros: update docstrings of add_user and create_user (#527)
  +  Fix headers for device types in network v2 docs (#532)
    [Caleb Xavier Berger]
  +  Add AlexBaranowski as contributor (#508) [Aleksander Baranowski]
  +  DataSourceOracle: refactor to use only OPC v1 endpoint (#493)
  +  .github/workflows/stale.yml: s/Josh/Rick/ (#526)
  +  Fix a typo in apt pipelining module (#525) [Xiao Liang]
  +  test_util: parametrize devlist tests (#523) [James Falcon]
  +  Recognize LABEL_FATBOOT labels (#513) [James Falcon] (LP: #1841466)
  +  Handle additional identifier for SLES For HPC (#520) [Robert Schweikert]
  +  Revert "test-requirements.txt: pin pytest to &lt;6 (#512)" (#515)
  +  test-requirements.txt: pin pytest to &lt;6 (#512)
  +  Add "tsanghan" as contributor (#504) [tsanghan]
  +  fix brpm building (LP: #1886107)
  +  Adding eandersson as a contributor (#502) [Erik Olof Gunnar Andersson]
  +  azure: disable bouncing hostname when setting hostname fails (#494)
    [Anh Vo]
  +  VMware: Support parsing DEFAULT-RUN-POST-CUST-SCRIPT (#441)
    [xiaofengw-vmware]
  +  DataSourceAzure: Use ValueError when JSONDecodeError is not available
    (#490) [Anh Vo]
  +  cc_ca_certs.py: fix blank line problem when removing CAs and adding
    new one (#483) [dermotbradley]
  +  freebsd: py37-serial is now py37-pyserial (#492) [Gonéri Le Bouder]
  +  ssh exit with non-zero status on disabled user (#472)
    [Eduardo Otubo] (LP: #1170059)
  +  cloudinit: remove global disable of pylint W0107 and fix errors (#489)
  +  networking: refactor wait_for_physdevs from cloudinit.net (#466)
    (LP: #1884626)
  +  HACKING.rst: add pytest.param pytest gotcha (#481)
  +  cloudinit: remove global disable of pylint W0105 and fix errors (#480)
  +  Fix two minor warnings (#475)
  +  test_data: fix faulty patch (#476)
  +  cc_mounts: handle missing fstab (#484) (LP: #1886531)
  +  LXD cloud_tests: support more lxd image formats (#482) [Paride Legovini]
  +  Add update_etc_hosts as default module on *BSD (#479) [Adam Dobrawy]
  +  cloudinit: fix tip-pylint failures and bump pinned pylint version (#478)
  +  Added BirknerAlex as contributor and sorted the file (#477)
    [Alexander Birkner]
  +  Update list of types of modules in cli.rst [saurabhvartak1982]
  +  tests: use markers to configure disable_subp_usage (#473)
  +  Add mention of vendor-data to no-cloud format documentation (#470)
    [Landon Kirk]
  +  Fix broken link to OpenStack metadata service docs (#467)
    [Matt Riedemann]
  +  Disable ec2 mirror for non aws instances (#390)
    [lucasmoura] (LP: #1456277)
  +  cloud_tests: don't pass  + -python-version to read-dependencies (#465)
  +  networking: refactor is_physical from cloudinit.net (#457) (LP: #1884619)
  +  Enable use of the caplog fixture in pytest tests, and add a
    cc_final_message test using it (#461)
  +  RbxCloud: Add support for FreeBSD (#464) [Adam Dobrawy]
  +  Add schema for cc_chef module (#375) [lucasmoura] (LP: #1858888)
  +  test_util: add (partial) testing for util.mount_cb (#463)
  +  .travis.yml: revert to installing ubuntu-dev-tools (#460)
  +  HACKING.rst: add details of net refactor tracking (#456)
  +  .travis.yml: rationalise installation of dependencies in host (#449)
  +  Add dermotbradley as contributor. (#458) [dermotbradley]
  +  net/networking: remove unused functions/methods (#453)
  +  distros.networking: initial implementation of layout (#391)
  +  cloud-init.service.tmpl: use "rhel" instead of "redhat" (#452)
  +  Change from redhat to rhel in systemd generator tmpl (#450)
    [Eduardo Otubo]
  +  Hetzner: support reading user-data that is base64 encoded. (#448)
    [Scott Moser] (LP: #1884071)
  +  HACKING.rst: add strpath gotcha to testing gotchas section (#446)
  +  cc_final_message: don't create directories when writing boot-finished
    (#445) (LP: #1883903)
  +  .travis.yml: only store new schroot if something has changed (#440)
  +  util: add ensure_dir_exists parameter to write_file (#443)
  +  printing the error stream of the dhclient process before killing it
    (#369) [Moustafa Moustafa]
  +  Fix link to the MAAS documentation (#442)
    [Paride Legovini] (LP: #1883666)
  +  RPM build: disable the dynamic mirror URLs when using a proxy (#437)
    [Paride Legovini]
  +  util: rename write_file's copy_mode parameter to preserve_mode (#439)
  +  .travis.yml: use $TRAVIS_BUILD_DIR for lxd_image caching (#438)
  +  cli.rst: alphabetise devel subcommands and add net-convert to list (#430)
  +  Default to UTF-8 in /var/log/cloud-init.log (#427) [James Falcon]
  +  travis: cache the chroot we use for package builds (#429)
  +  test: fix all flake8 E126 errors (#425) [Joshua Powers]
  +  Fixes KeyError for bridge with no "parameters:" setting (#423)
    [Brian Candler] (LP: #1879673)
  +  When tools.conf does not exist, running cmd "vmware-toolbox-cmd
    config get deployPkg enable-custom-scripts", the return code will
    be EX_UNAVAILABLE(69), on this condition, it should not take it as
    error. (#413) [chengcheng-chcheng]
  +  Document CloudStack data-server well-known hostname (#399) [Gregor Riepl]
  +  test: move conftest.py to top-level, to cover tests/ also (#414)
  +  Replace cc_chef is_installed with use of subp.is_exe. (#421)
    [Scott Moser]
  +  Move runparts to subp. (#420) [Scott Moser]
  +  Move subp into its own module. (#416) [Scott Moser]
  +  readme: point at travis-ci.com (#417) [Joshua Powers]
  +  New feature flag functionality and fix includes failing silently (#367)
    [James Falcon] (LP: #1734939)
  +  Enhance poll imds logging (#365) [Moustafa Moustafa]
  +  test: fix all flake8 E121 and E123 errors (#404) [Joshua Powers]
  +  test: fix all flake8 E241 (#403) [Joshua Powers]
  +  test: ignore flake8 E402 errors in main.py (#402) [Joshua Powers]
  +  cc_grub_dpkg: determine idevs in more robust manner with grub-probe
    (#358) [Matthew Ruffell] (LP: #1877491)
  +  test: fix all flake8 E741 errors (#401) [Joshua Powers]
  +  tests: add groovy integration tests for ubuntu (#400)
  +  Enable chef_license support for chef infra client (#389) [Bipin Bachhao]
  +  testing: use flake8 again (#392) [Joshua Powers]
  +  enable Puppet, Chef mcollective in default config (#385)
    [Mina Galić (deprecated: Igor Galić)] (LP: #1880279)
  +  HACKING.rst: introduce .net  + &gt; Networking refactor section (#384)
  +  Travis: do not install python3-contextlib2 (dropped dependency) (#388)
    [Paride Legovini]
  +  HACKING: mention that .github-cla-signers is alpha-sorted (#380)
  +  Add bipinbachhao as contributor (#379) [Bipin Bachhao]
  +  cc_snap: validate that assertions property values are strings (#370)
  +  conftest: implement partial disable_subp_usage (#371)
  +  test_resolv_conf: refresh stale comment (#374)
  +  cc_snap: apply validation to snap.commands properties (#364)
  +  make finding libc platform independent (#366)
    [Mina Galić (deprecated: Igor Galić)]
  +  doc/rtd/topics/faq: Updates LXD docs links to current site (#368) [TomP]
  +  templater: drop Jinja Python 2 compatibility shim (#353)
  +  cloudinit: minor pylint fixes (#360)
  +  cloudinit: remove unneeded __future__ imports (#362)
  +  migrating momousta lp user to Moustafa-Moustafa GitHub user (#361)
    [Moustafa Moustafa]
  +  cloud_tests: emit dots on Travis while fetching images (#347)
  +  Add schema to apt configure config (#357) [lucasmoura] (LP: #1858884)
  +  conftest: add docs and tests regarding CiTestCase's subp functionality
    (#343)
  +  analyze/dump: refactor shared string into variable (#350)
  +  doc: update boot.rst with correct timing of runcmd (#351)
  +  HACKING.rst: change contact info to Rick Harding (#359) [lucasmoura]
  +  HACKING.rst: guide people to add themselves to the CLA file (#349)
  +  HACKING.rst: more unit testing documentation (#354)
  +  .travis.yml: don't run lintian during integration test package builds
    (#352)
  +  Add test to ensure docs examples are valid cloud-init configs (#355)
    [James Falcon] (LP: #1876414)
  +  make suse and sles support 127.0.1.1 (#336) [chengcheng-chcheng]
  +  Create tests to validate schema examples (#348)
    [lucasmoura] (LP: #1876412)
  +  analyze/dump: add support for Amazon Linux 2 log lines (#346)
    (LP: #1876323)
  +  bsd: upgrade support (#305) [Gonéri Le Bouder]
  +  Add lucasmoura as contributor (#345) [lucasmoura]
  +  Add "therealfalcon" as contributor (#344) [James Falcon]
  +  Adapt the package building scripts to use Python 3 (#231)
    [Paride Legovini]
  +  DataSourceEc2: use metadata's NIC ordering to determine route-metrics
    (#342) (LP: #1876312)
  +  .travis.yml: introduce caching (#329)
  +  cc_locale: introduce schema (#335)
  +  doc/rtd/conf.py: bump copyright year to 2020 (#341)
  +  yum_add_repo: Add Centos to the supported distro list (#340)</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637755200">- Remove unneeded BuildRequires on python3-nose.</changelog>
  <changelog author="rjschwei@suse.com" date="1645099200">- systemctl location (bsc#1193531)
  - Add cloud-init-sysctl-not-in-bin.patch
  - The sytemctl executable is not necessarily in '/bin'</changelog>
  <changelog author="rjschwei@suse.com" date="1645185600">- Update to version 21.4 (bsc#1192343, jsc#PM-3181)
  + Also include VMWare functionality for (jsc#PM-3175)
  + Remove patches included upstream:
  - cloud-init-purge-cache-py-ver-change.patch
  - cloud-init-update-test-characters-in-substitution-unit-test.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-vmware-test.patch
  - Test is system dependend, not properly mocked
  + Azure: fallback nic needs to be reevaluated during reprovisioning
    (#1094) [Anh Vo]
  + azure: pps imds (#1093) [Anh Vo]
  + testing: Remove calls to 'install_new_cloud_init' (#1092)
  + Add LXD datasource (#1040)
  + Fix unhandled apt_configure case. (#1065) [Brett Holman]
  + Allow libexec for hotplug (#1088)
  + Add necessary mocks to test_ovf unit tests (#1087)
  + Remove (deprecated) apt-key (#1068) [Brett Holman] (LP: #1836336)
  + distros: Remove a completed "TODO" comment (#1086)
  + cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    [dermotbradley]
  + Add "install hotplug" module (SC-476) (#1069) (LP: #1946003)
  + hosts.alpine.tmpl: rearrange the order of short and long hostnames
    (#1084) [dermotbradley]
  + Add max version to docutils
  + cloudinit/dmi.py: Change warning to debug to prevent console display
    (#1082) [dermotbradley]
  + remove unnecessary EOF string in
    disable-sshd-keygen-if-cloud-init-active.conf (#1075) [Emanuele
    Giuseppe Esposito]
  + Add module 'write-files-deferred' executed in stage 'final' (#916)
    [Lucendio]
  + Bump pycloudlib to fix CI (#1080)
  + Remove pin in dependencies for jsonschema (#1078)
  + Add "Google" as possible system-product-name (#1077) [vteratipally]
  + Update Debian security suite for bullseye (#1076) [Johann Queuniet]
  + Leave the details of service management to the distro (#1074)
    [Andy Fiddaman]
  + Fix typos in setup.py (#1059) [Christian Clauss]
  + Update Azure _unpickle (SC-500) (#1067) (LP: #1946644)
  + cc_ssh.py: fix private key group owner and permissions (#1070)
    [Emanuele Giuseppe Esposito]
  + VMware: read network-config from ISO (#1066) [Thomas Weißschuh]
  + testing: mock sleep in gce unit tests (#1072)
  + CloudStack: fix data-server DNS resolution (#1004)
    [Olivier Lemasle] (LP: #1942232)
  + Fix unit test broken by pyyaml upgrade (#1071)
  + testing: add get_cloud function (SC-461) (#1038)
  + Inhibit sshd-keygen@.service if cloud-init is active (#1028)
    [Ryan Harper]
  + VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    [xiaofengw-vmware] (LP: #1944946)
  + Fix set-name/interface DNS bug (#1058) [Andrew Kutz] (LP: #1946493)
  + Use specified tmp location for growpart (#1046) [jshen28]
  + .gitignore: ignore tags file for ctags users (#1057) [Brett Holman]
  + Allow comments in runcmd and report failed commands correctly (#1049)
    [Brett Holman] (LP: #1853146)
  + tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    [Paride Legovini]
  + Allow disabling of network activation (SC-307) (#1048) (LP: #1938299)
  + renderer: convert relative imports to absolute (#1052) [Paride Legovini]
  + Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    [Vlastimil Holer]
  + integration-requirements: bump the pycloudlib commit (#1047)
    [Paride Legovini]
  + Allow Vultr to set MTU and use as-is configs (#1037) [eb3095]
  + pin jsonschema in requirements.txt (#1043)
  + testing: remove cloud_tests (#1020)
  + Add andgein as contributor (#1042) [Andrew Gein]
  + Make wording for module frequency consistent (#1039) [Nicolas Bock]
  + Use ascii code for growpart (#1036) [jshen28]
  + Add jshen28 as contributor (#1035) [jshen28]
  + Skip test_cache_purged_on_version_change on Azure (#1033)
  + Remove invalid ssh_import_id from examples (#1031)
  + Cleanup Vultr support (#987) [eb3095]
  + docs: update cc_disk_setup for fs to raw disk (#1017)
  + HACKING.rst: change contact info to James Falcon (#1030)
  + tox: bump the pinned flake8 and pylint version (#1029)
    [Paride Legovini] (LP: #1944414)
  + Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    [vteratipally]
  + Set Azure to apply networking config every BOOT (#1023)
  + Add connectivity_url to Oracle's EphemeralDHCPv4 (#988) (LP: #1939603)
  + docs: fix typo and include sudo for report bugs commands (#1022)
    [Renan Rodrigo] (LP: #1940236)
  + VMware: Fix typo introduced in #947 and add test (#1019) [PengpengSun]
  + Update IPv6 entries in /etc/hosts (#1021) [Richard Hansen] (LP: #1943798)
  + Integration test upgrades for the 21.3-1 SRU (#1001)
  + Add Jille to tools/.github-cla-signers (#1016) [Jille Timmermans]
  + Improve ug_util.py (#1013) [Shreenidhi Shedi]
  + Support openEuler OS (#1012) [zhuzaifangxuele]
  + ssh_utils.py: ignore when sshd_config options are not key/value pairs
    (#1007) [Emanuele Giuseppe Esposito]
  + Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
  + cc_update_etc_hosts: Use the distribution-defined path for the hosts
    file (#983) [Andy Fiddaman]
  + Add CloudLinux OS support (#1003) [Alexandr Kravchenko]
  + puppet config: add the start_agent option (#1002) [Andrew Bogott]
  + Fix `make style-check` errors (#1000) [Shreenidhi Shedi]
  + Make cloud-id copyright year (#991) [Andrii Podanenko]
  + Add support to accept-ra in networkd renderer (#999) [Shreenidhi Shedi]
  + Update ds-identify to pass shellcheck (#979) [Andrew Kutz]
  + Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    [aswinrajamannar]
  + testing: Fix ssh keys integration test (#992)
- From 21.3
  + Azure: During primary nic detection, check interface status continuously
    before rebinding again (#990) [aswinrajamannar]
  + Fix home permissions modified by ssh module (SC-338) (#984)
    (LP: #1940233)
  + Add integration test for sensitive jinja substitution (#986)
  + Ignore hotplug socket when collecting logs (#985) (LP: #1940235)
  + testing: Add missing mocks to test_vmware.py (#982)
  + add Zadara Edge Cloud Platform to the supported clouds list (#963)
    [sarahwzadara]
  + testing: skip upgrade tests on LXD VMs (#980)
  + Only invoke hotplug socket when functionality is enabled (#952)
  + Revert unnecesary lcase in ds-identify (#978) [Andrew Kutz]
  + cc_resolv_conf: fix typos (#969) [Shreenidhi Shedi]
  + Replace broken httpretty tests with mock (SC-324) (#973)
  + Azure: Check if interface is up after sleep when trying to bring it up
    (#972) [aswinrajamannar]
  + Update dscheck_VMware's rpctool check (#970) [Shreenidhi Shedi]
  + Azure: Logging the detected interfaces (#968) [Moustafa Moustafa]
  + Change netifaces dependency to 0.10.4 (#965) [Andrew Kutz]
  + Azure: Limit polling network metadata on connection errors (#961)
    [aswinrajamannar]
  + Update inconsistent indentation (#962) [Andrew Kutz]
  + cc_puppet: support AIO installations and more (#960) [Gabriel Nagy]
  + Add Puppet contributors to CLA signers (#964) [Noah Fontes]
  + Datasource for VMware (#953) [Andrew Kutz]
  + photon: refactor hostname handling and add networkd activator (#958)
    [sshedi]
  + Stop copying ssh system keys and check folder permissions (#956)
    [Emanuele Giuseppe Esposito]
  + testing: port remaining cloud tests to integration testing framework
    (SC-191) (#955)
  + generate contents for ovf-env.xml when provisioning via IMDS (#959)
    [Anh Vo]
  + Add support for EuroLinux 7 &amp;&amp; EuroLinux 8 (#957) [Aleksander Baranowski]
  + Implementing device_aliases as described in docs (#945)
    [Mal Graty] (LP: #1867532)
  + testing: fix test_ssh_import_id.py (#954)
  + Add ability to manage fallback network config on PhotonOS (#941) [sshedi]
  + Add VZLinux support (#951) [eb3095]
  + VMware: add network-config support in ovf-env.xml (#947) [PengpengSun]
  + Update pylint to v2.9.3 and fix the new issues it spots (#946)
    [Paride Legovini]
  + Azure: mount default provisioning iso before try device listing (#870)
    [Anh Vo]
  + Document known hotplug limitations (#950)
  + Initial hotplug support (#936)
  + Fix MIME policy failure on python version upgrade (#934)
  + run-container: fixup the centos repos baseurls when using http_proxy
    (#944) [Paride Legovini]
  + tools: add support for building rpms on rocky linux (#940)
  + ssh-util: allow cloudinit to merge all ssh keys into a custom user
    file, defined in AuthorizedKeysFile (#937) [Emanuele Giuseppe Esposito]
    (LP: #1911680)
  + VMware: new "allow_raw_data" switch (#939) [xiaofengw-vmware]
  + bump pycloudlib version (#935)
  + add renanrodrigo as a contributor (#938) [Renan Rodrigo]
  + testing: simplify test_upgrade.py (#932)
  + freebsd/net_v1 format: read MTU from root (#930) [Gonéri Le Bouder]
  + Add new network activators to bring up interfaces (#919)
  + Detect a Python version change and clear the cache (#857)
    [Robert Schweikert]
  + cloud_tests: fix the Impish release name (#931) [Paride Legovini]
  + Removed distro specific network code from Photon (#929) [sshedi]
  + Add support for VMware PhotonOS (#909) [sshedi]
  + cloud_tests: add impish release definition (#927) [Paride Legovini]
  + docs: fix stale links rename master branch to main (#926)
  + Fix DNS in NetworkState (SC-133) (#923)
  + tests: Add 'adhoc' mark for integration tests (#925)
  + Fix the spelling of "DigitalOcean" (#924) [Mark Mercado]
  + Small Doc Update for ReportEventStack and Test (#920) [Mike Russell]
  + Replace deprecated collections.Iterable with abc replacement (#922)
    (LP: #1932048)
  + testing: OCI availability domain is now required (SC-59) (#910)
  + add DragonFlyBSD support (#904) [Gonéri Le Bouder]
  + Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    (LP: #1931392)
  + doc: Update NoCloud docs stating required files (#918) (LP: #1931577)
  + build-on-netbsd: don't pin a specific py3 version (#913)
    [Gonéri Le Bouder]
  + Create the log file with 640 permissions (#858) [Robert Schweikert]
  + Allow braces to appear in dhclient output (#911) [eb3095]
  + Docs: Replace all freenode references with libera (#912)
  + openbsd/net: flush the route table on net restart (#908)
    [Gonéri Le Bouder]
  + Add Rocky Linux support to cloud-init (#906) [Louis Abel]
  + Add "esposem" as contributor (#907) [Emanuele Giuseppe Esposito]
  + Add integration test for #868 (#901)
  + Added support for importing keys via primary/security mirror clauses
    (#882) [Paul Goins] (LP: #1925395)
  + [examples] config-user-groups expire in the future (#902)
    [Geert Stappers]
  + BSD: static network, set the mtu (#894) [Gonéri Le Bouder]
  + Add integration test for lp-1920939 (#891)
  + Fix unit tests breaking from new httpretty version (#903)
  + Allow user control over update events (#834)
  + Update test characters in substitution unit test (#893)
  + cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    [dermotbradley]
  + Add AlmaLinux OS support (#872) [Andrew Lukoshko]</changelog>
  <changelog author="rjschwei@suse.com" date="1671710400">- Update to version 22.4
  + Remove patches included upstream:
  - cloud-init-vmware-test.patch
  - cloud-init-sysctl-not-in-bin.patch
  + Forward port:
  - cloud-init-write-routes.patch
  - cloud-init-break-resolv-symlink.patch
  - cloud-init-sysconf-path.patch
  - cloud-init-no-tempnet-oci.patch
  + Add cloud-init-btrfs-queue-resize.patch (bsc#1171511)
  + Add cloud-init-micro-is-suse.patch (bsc#1203393) [Martin Petersen]
  + Add cloud-init-suse-afternm.patch
  + test: fix pro integration test [Alberto Contreras]
  + cc_disk_setup: pass options in correct order to utils (#1829)
    [dermotbradley]
  + tests: text_lxd basic_preseed verify_clean_log (#1826)
  + docs: switch sphinx theme to furo (SC-1327) (#1821) [Alberto Contreras]
  + tests: activate Ubuntu Pro tests (only on Jenkins) (#1777)
    [Alberto Contreras]
  + tests: test_lxd assert features.storage.buckets when present (#1827)
  + tests: replace missed ansible install-method with underscore (#1825)
  + tests: replace ansible install-method with underscore
  + ansible: standardize schema keys
  + ci: run json tool on 22.04 rather than 20.04 (#1823)
  + Stop using devices endpoint for LXD network config (#1819)
  + apport: address new curtin log and config locations (#1812)
  + cc_grub: reword docs for clarity (#1818)
  + tests: Fix preseed test (#1820)
  + Auto-format schema (#1810)
  + Ansible Control Module (#1778)
  + Fix last reported event possibly not being sent (#1796) (LP: #1993836)
  + tests: Ignore unsupported lxd project keys (#1817) [Alberto Contreras]
  + udevadm settle should handle non-udev system gracefully (#1806)
    [dermotbradley]
  + add mariner support (#1780) [Minghe Ren]
  + Net: add BSD ifconfig(8) parser and state class (#1779) [Mina Galić]
  + adding itjamie to .github-cla-signers [Jamie (Bear) Murphy]
  + Fix inconsistency between comment and statement (#1809) [Guillaume Gay]
  + Update .github-cla-signers (#1811) [Guillaume Gay]
  + alpine.py: Add Alpine-specific manage_service function and update tests
    (#1804) [dermotbradley]
  + test: add 3.12-dev to Travis CI (#1798) [Alberto Contreras]
  + add NWCS datasource (#1793) [shell-skrimp]
  + Adding myself as CLA signer (#1799) [s-makin]
  + apport: fix some data collection failures due to symlinks (#1797)
    [Dan Bungert]
  + read-version: Make it compatible with bionic (#1795) [Alberto Contreras]
  + lxd: add support for lxd preseed config(#1789)
  + Enable hotplug for LXD datasource (#1787)
  + cli: collect logs and apport subiquity support
  + add support for Container-Optimized OS (#1748) [vteratipally]
  + test: temporarily disable failing integration test (#1792)
  + Fix LXD/nocloud detection on lxd vm tests (#1791)
  + util: Implement __str__ and __iter__ for Version (#1790)
  + cc_ua: consume ua json api for enable commands [Alberto Contreras]
  + Add clarity to cc_final_message docs (#1788)
  + cc_ntp: add support for BSDs (#1759) [Mina Galić] (LP: #1990041)
  + make Makefile make agnostic (#1786) [Mina Galić]
  + Remove hardcoding and unnecessary overrides in Makefile (#1783)
    [Joseph Mingrone]
  + Add my username (Jehops) to .github-cla-signers (#1784) [Joseph Mingrone]
  + Temporarily remove broken test (#1781)
  + Create reference documentation for base config
  + cc_ansible: add support for galaxy install (#1736)
  + distros/manage_services: add support to disable service (#1772)
    [Mina Galić] (LP: #1991024)
  + OpenBSD: remove pkg_cmd_environ function (#1773)
    [Mina Galić] (LP: 1991567)
  + docs: Correct typo in the FAQ (#1774) [Maximilian Wörner]
  + tests: Use LXD metadata to determine NoCloud status (#1776)
  + analyze: use init-local as start of boot record (#1767) [Chris Patterson]
  + docs: use opensuse for distro name in package doc (#1771)
  + doc: clarify packages as dev only (#1769) [Alberto Contreras]
  + Distro manage service: Improve BSD support (#1758)
    [Mina Galić] (LP: #1990070)
  + testing: check logs for critical errors (#1765) [Chris Patterson]
  + cc_ubuntu_advantage: Handle already attached on Pro [Alberto Contreras]
  + doc: Add configuration explanation (SC-1169)
  + Fix Oracle DS primary interface when using IMDS (#1757) (LP: #1989686)
  + style: prefer absolute imports over relative imports [Mina Galić]
  + tests: Fix ip log during instance destruction (#1755) [Alberto Contreras]
  + cc_ubuntu_advantage: add ua_config in auto-attach [Alberto Contreras]
  + apt configure: sources write/append mode (#1738)
    [Fabian Lichtenegger-Lukas]
  + networkd: Add test and improve typing. (#1747) [Alberto Contreras]
  + pycloudlib: bump commit for gce cpu architecture support (#1750)
  + commit ffcb29bc8315d1e1d6244eeb1cbd8095958f7bad (LP: #1307667)
  + testing: workaround LXD vendor data (#1740)
  + support dhcp{4,6}-overrides in networkd renderer (#1710) [Aidan Obley]
  + tests: Drop httpretty in favor of responses (#1720) [Alberto Contreras]
  + cc_ubuntu_advantage: Implement custom auto-attach behaviors (#1583)
    [Alberto Contreras]
  + Fix Oracle DS not setting subnet when using IMDS (#1735) (LP: #1989686)
  + testing: focal lxd datasource discovery (#1734)
  + cc_ubuntu_advantage: Redact token from logs (#1726) [Alberto Contreras]
  + docs: make sure echo properly evaluates the string (#1733) [Mina Galić]
  + net: set dhclient lease and pid files (#1715)
  + cli: status machine-readable output --format yaml/json (#1663)
    (LP: #1883122)
  + tests: Simplify does_not_raise (#1731) [Alberto Contreras]
  + Refactor: Drop inheritance from object (#1728) [Alberto Contreras]
  + testing: LXD datasource now supported on Focal (#1732)
  + Allow jinja templating in /etc/cloud (SC-1170) (#1722) (LP: #1913461)
  + sources/azure: ensure instance id is always correct (#1727)
    [Chris Patterson]
  + azure: define new attribute for pre-22.3 pickles (#1725)
  + doc: main page Diátaxis rewording (SC-967) (#1701)
  + ubuntu advantage: improved idempotency, enable list is now strict
  + [Fabian Lichtenegger-Lukas]
  + test: bump pycloudlib (#1724) [Alberto Contreras]
  + cloud.cfg.tmpl: make sure "centos" settings are identical to "rhel"
    (#1639) [Emanuele Giuseppe Esposito]
  + lxd: fetch 1.0/devices content (#1712) [Alberto Contreras]
  + Update docs according to ad8f406a (#1719)
  + testing: Port unittests/analyze to pytest (#1708) [Alberto Contreras]
  + doc: Fix rtd builds. (#1718) [Alberto Contreras]
  + testing: fully mock noexec calls (#1717) [Alberto Contreras]
  + typing: Add types to cc_&lt;module&gt;.handle (#1700) [Alberto Contreras]
  + Identify 3DS Outscale Datasource as Ec2 (#1686) [Maxime Dufour]
  + config: enable bootstrapping pip in ansible (#1707)
  + Fix cc_chef typing issue (#1716)
  + Refactor instance json files to use Paths (SC-1238) (#1709)
  + tools: read-version check GITHUB_REF and git branch --show-current
    (#1677)
  + net: Ensure a tmp with exec permissions for dhcp (#1690)
    [Alberto Contreras] (LP: #1962343)
  + testing: Fix test regression in test_combined (#1713) [Alberto Contreras]
  + Identify Huawei Cloud as OpenStack (#1689) [huang xinjie]
  + doc: add reporting suggestion to FAQ (SC-1236) (#1698)
  From 22.3
  + sources: obj.pkl cache should be written anyime get_data is run (#1669)
  + schema: drop release number from version file (#1664)
  + pycloudlib: bump to quiet azure HTTP info logs (#1668)
  + test: fix wireguard integration tests (#1666)
  + Github is deprecating the 18.04 runner starting 12.1 (#1665)
  + integration tests: Ensure one setup for all tests (#1661)
  + tests: ansible test fixes (#1660)
  + Prevent concurrency issue in test_webhook_hander.py (#1658)
  + Workaround net_setup_link race with udev (#1655) (LP: #1983516)
  + test: drop erroneous lxd assertion, verify command succeeded (#1657)
  + Fix Chrony usage on Centos Stream (#1648) [Sven Haardiek] (LP: #1885952)
  + sources/azure: handle network unreachable errors for savable PPS (#1642)
    [Chris Patterson]
  + Return cc_set_hostname to PER_INSTANCE frequency (#1651) (LP: #1983811)
  + test: Collect integration test time by default (#1638)
  + test: Drop forced package install hack in lxd integration test (#1649)
  + schema: Resolve user-data if --system given (#1644)
    [Alberto Contreras] (LP: #1983306)
  + test: use fake filesystem to avoid file removal (#1647)
    [Alberto Contreras]
  + tox: Fix tip-flake8 and tip-mypy (#1635) [Alberto Contreras]
  + config: Add wireguard config module (#1570) [Fabian Lichtenegger-Lukas]
  + tests: can run without azure-cli, tests expect inactive ansible (#1643)
  + typing: Type UrlResponse.contents (#1633) [Alberto Contreras]
  + testing: fix references to `DEPRECATED.` (#1641) [Alberto Contreras]
  + ssh_util: Handle sshd_config.d folder [Alberto Contreras] (LP: #1968873)
  + schema: Enable deprecations in cc_update_etc_hosts (#1631)
    [Alberto Contreras]
  + Add Ansible Config Module (#1579)
  + util: Support Idle process state in get_proc_ppid() (#1637)
  + schema: Enable deprecations in cc_growpart (#1628) [Alberto Contreras]
  + schema: Enable deprecations in cc_users_groups (#1627)
    [Alberto Contreras]
  + util: Fix error path and parsing in get_proc_ppid()
  + main: avoid downloading full contents cmdline urls (#1606)
    [Alberto Contreras] (LP: #1937319)
  + schema: Enable deprecations in cc_scripts_vendor (#1629)
    [Alberto Contreras]
  + schema: Enable deprecations in cc_set_passwords (#1630)
    [Alberto Contreras]
  + sources/azure: add experimental support for preprovisioned os disks
    (#1622) [Chris Patterson]
  + Remove configobj a_to_u calls (#1632) [Stefano Rivera]
  + cc_debug: Drop this module (#1614) [Alberto Contreras]
  + schema: add aggregate descriptions in anyOf/oneOf (#1636)
  + testing: migrate test_sshutil to pytest (#1617) [Alberto Contreras]
  + testing: Fix test_ca_certs integration test (#1626) [Alberto Contreras]
  + testing: add support for pycloudlib's pro images (#1604)
    [Alberto Contreras]
  + testing: migrate test_cc_set_passwords to pytest (#1615)
    [Alberto Contreras]
  + network: add system_info network activator cloud.cfg overrides (#1619)
    (LP: #1958377)
  + docs: Align git remotes with uss-tableflip setup (#1624)
    [Alberto Contreras]
  + testing: cover active config module checks (#1609) [Alberto Contreras]
  + lxd: lvm avoid thinpool when kernel module absent
  + lxd: enable MTU configuration in cloud-init
  + doc: pin doc8 to last passing version
  + cc_set_passwords fixes (#1590)
  + Modernise importer.py and type ModuleDetails (#1605) [Alberto Contreras]
  + config: Def activate_by_schema_keys for t-z (#1613) [Alberto Contreras]
  + config: define activate_by_schema_keys for p-r mods (#1611)
    [Alberto Contreras]
  + clean: add param to remove /etc/machine-id for golden image creation
  + config: define `activate_by_schema_keys` for a-f mods (#1608)
    [Alberto Contreras]
  + config: define activate_by_schema_keys for s mods (#1612)
    [Alberto Contreras]
  + sources/azure: reorganize tests for network config (#1586)
  + [Chris Patterson]
  + config: Define activate_by_schema_keys for g-n mods (#1610)
    [Alberto Contreras]
  + meta-schema: add infra to skip inapplicable modules [Alberto Contreras]
  + sources/azure: don't set cfg["password"] for default user pw (#1592)
    [Chris Patterson]
  + schema: activate grub-dpkg deprecations (#1600) [Alberto Contreras]
  + docs: clarify user password purposes (#1593)
  + cc_lxd: Add btrfs and lvm lxd storage options (SC-1026) (#1585)
  + archlinux: Fix distro naming[1] (#1601) [Kristian Klausen]
  + cc_ubuntu_autoinstall: support live-installer autoinstall config
  + clean: allow third party cleanup scripts in /etc/cloud/clean.d (#1581)
  + sources/azure: refactor chassis asset tag handling (#1574)
    [Chris Patterson]
  + Add "netcho" as contributor (#1591) [Kaloyan Kotlarski]
  + testing: drop impish support (#1596) [Alberto Contreras]
  + black: fix missed formatting issue which landed in main (#1594)
  + bsd: Don't assume that root user is in root group (#1587)
  + docs: Fix comment typo regarding use of packages (#1582)
    [Peter Mescalchin]
  + Update govc command in VMWare walkthrough (#1576) [manioo8]
  + Update .github-cla-signers (#1588) [Daniel Mullins]
  + Rename the openmandriva user to omv (#1575) [Bernhard Rosenkraenzer]
  + sources/azure: increase read-timeout to 60 seconds for wireserver
    (#1571) [Chris Patterson]
  + Resource leak cleanup (#1556)
  + testing: remove appereances of FakeCloud (#1584) [Alberto Contreras]
  + Fix expire passwords for hashed passwords (#1577)
    [Sadegh Hayeri] (LP: #1979065)
  + mounts: fix suggested_swapsize for &gt; 64GB hosts (#1569) [Steven Stallion]
  + Update chpasswd schema to deprecate password parsing (#1517)
  + tox: Remove entries from default envlist (#1578) (LP: #1980854)
  + tests: add test for parsing static dns for existing devices (#1557)
    [Jonas Konrad]
  + testing: port cc_ubuntu_advantage test to pytest (#1559)
    [Alberto Contreras]
  + Schema deprecation handling (#1549) [Alberto Contreras]
  + Enable pytest to run in parallel (#1568)
  + sources/azure: refactor ovf-env.xml parsing (#1550) [Chris Patterson]
  + schema: Force stricter validation (#1547)
  + ubuntu advantage config: http_proxy, https_proxy (#1512)
    [Fabian Lichtenegger-Lukas]
  + net: fix interface matching support (#1552) (LP: #1979877)
  + Fuzz testing jsonchema (#1499) [Alberto Contreras]
  + testing: Wait for changed boot-id in test_status.py (#1548)
  + CI: Fix GH pinned-format jobs (#1558) [Alberto Contreras]
  + Typo fix (#1560) [Jaime Hablutzel]
  + tests: mock dns lookup that causes long timeouts (#1555)
  + tox: add unpinned env for do_format and check_format (#1554)
  + cc_ssh_import_id: Substitute deprecated warn (#1553) [Alberto Contreras]
  + Remove schema errors from log (#1551) (LP: #1978422) (CVE-2022-2084)
  + Update WebHookHandler to run as background thread (SC-456) (#1491)
    (LP: #1910552)
  + testing: Don't run custom cloud dir test on Bionic (#1542)
  + bash completion: update schema command (#1543) (LP: #1979547)
  + CI: add non-blocking run against the linters tip versions (#1531)
    [Paride Legovini]
  + Change groups within the users schema to support lists and strings
    (#1545) [RedKrieg]
  + make it clear which username should go in the contributing doc (#1546)
  + Pin setuptools for Travis (SC-1136) (#1540)
  + Fix LXD datasource crawl when BOOT enabled (#1537)
  + testing: Fix wrong path in dual stack test (#1538)
  + cloud-config: honor cloud_dir setting (#1523)
    [Alberto Contreras] (LP: #1976564)
  + Add python3-debconf to pkg-deps.json Build-Depends (#1535)
    [Alberto Contreras]
  + redhat spec: udev/rules.d lives under /usr/lib on rhel-based systems
    (#1536)
  + tests/azure: add test coverage for DisableSshPasswordAuthentication
    (#1534) [Chris Patterson]
  + summary: Add david-caro to the cla signers (#1527) [David Caro]
  + Add support for OpenMandriva (https://openmandriva.org/) (#1520)
    [Bernhard Rosenkraenzer]
  + tests/azure: refactor ovf creation (#1533) [Chris Patterson]
  + Improve DataSourceOVF error reporting when script disabled (#1525) [rong]
  + tox: integration-tests-jenkins: softfail if only some test failed
    (#1528) [Paride Legovini]
  + CI: drop linters from Travis CI (moved to GH Actions) (#1530)
    [Paride Legovini]
  + sources/azure: remove unused encoding support for customdata (#1526)
    [Chris Patterson]
  + sources/azure: remove unused metadata captured when parsing ovf (#1524)
    [Chris Patterson]
  + sources/azure: remove dscfg parsing from ovf-env.xml (#1522)
    [Chris Patterson]
  + Remove extra space from ec2 dual stack crawl message (#1521)
  + tests/azure: use namespaces in generated ovf-env.xml documents (#1519)
    [Chris Patterson]
  + setup.py: adjust udev/rules default path (#1513)
    [Emanuele Giuseppe Esposito]
  + Add python3-deconf dependency (#1506) [Alberto Contreras]
  + Change match macadress param for network v2 config (#1518)
    [Henrique Caricatti Capozzi]
  + sources/azure: remove unused userdata property from ovf (#1516)
    [Chris Patterson]
  + sources/azure: minor refactoring to network config generation (#1497)
    [Chris Patterson]
  + net: Implement link-local ephemeral ipv6
  + Rename function to avoid confusion (#1501)
  + Fix cc_phone_home requiring 'tries' (#1500) (LP: #1977952)
  + datasources: replace networking functions with stdlib and cloudinit.net
  + code
  + Remove xenial references (#1472) [Alberto Contreras]
  + Oracle ds changes (#1474) [Alberto Contreras] (LP: #1967942)
  + improve runcmd docs (#1498)
  + add 3.11-dev to Travis CI (#1493)
  + Only run github actions on pull request (#1496)
  + Fix integration test client creation (#1494) [Alberto Contreras]
  + tox: add link checker environment, fix links (#1480)
  + cc_ubuntu_advantage: Fix doc (#1487) [Alberto Contreras]
  + cc_yum_add_repo: Fix repo id canonicalization (#1489)
    [Alberto Contreras] (LP: #1975818)
  + Add linitio as contributor in the project (#1488) [Kevin Allioli]
  + net-convert: use yaml.dump for debugging python NetworkState obj (#1484)
    (LP: #1975907)
  + test_schema: no relative $ref URLs, replace $ref with local path (#1486)
  + cc_set_hostname: do not write "localhost" when no hostname is given
  + (#1453) [Emanuele Giuseppe Esposito]
  + Update .github-cla-signers (#1478) [rong]
  + schema: write_files defaults, versions $ref full URL and add vscode
    (#1479)
  + docs: fix external links, add one more to the list (#1477)
  + doc: Document how to change module frequency (#1481)
  + tests: bump pycloudlib (#1482)
  + tests: bump pycloudlib pinned commit for kinetic Azure (#1476)
  + testing: fix test_status.py (#1475)
  + integration tests: If KEEP_INSTANCE = True, log IP (#1473)
  + Drop mypy excluded files (#1454) [Alberto Contreras]
  + Docs additions (#1470)
  + Add "formatting tests" to Github Actions
  + Remove unused arguments in function signature (#1471)
  + Changelog: correct errant classification of LP issues as GH (#1464)
  + Use Network-Manager and Netplan as default renderers for RHEL and Fedora
    (#1465) [Emanuele Giuseppe Esposito]
  From 22.2
  + Fix test due to caplog incompatibility (#1461) [Alberto Contreras]
  + Align rhel custom files with upstream (#1431)
    [Emanuele Giuseppe Esposito]
  + cc_write_files: Improve schema. (#1460) [Alberto Contreras]
  + cli: Redact files with permission errors in commands (#1440)
  + [Alberto Contreras] (LP: #1953430)
  + Improve cc_set_passwords. (#1456) [Alberto Contreras]
  + testing: make fake cloud-init wait actually wait (#1459)
  + Scaleway: Fix network configuration for netplan 0.102 and later (#1455)
    [Maxime Corbin]
  + Fix 'ephmeral' typos in disk names(#1452) [Mike Hucka]
  + schema: version schema-cloud-config-v1.json (#1424)
  + cc_modules: set default meta frequency value when no config available
    (#1457)
  + Log generic warning on non-systemd systems. (#1450) [Alberto Contreras]
  + cc_snap.maybe_install_squashfuse no longer needed in Bionic++. (#1448)
    [Alberto Contreras]
  + Drop support of *-sk keys in cc_ssh (#1451) [Alberto Contreras]
  + testing: Fix console_log tests (#1437)
  + tests: cc_set_passoword update for systemd, non-systemd distros  (#1449)
  + Fix bug in url_helper/dual_stack() logging (#1426)
  + schema: render schema paths from _CustomSafeLoaderWithMarks (#1391)
  + testing: Make integration tests kinetic friendly (#1441)
  + Handle error if SSH service no present. (#1422)
    [Alberto Contreras] (LP: #1969526)
  + Fix network-manager activator availability and order (#1438)
  + sources/azure: remove reprovisioning marker (#1414) [Chris Patterson]
  + upstart: drop vestigial support for upstart (#1421)
  + testing: Ensure NoCloud detected in test (#1439)
  + Update .github-cla-signers kallioli [Kevin Allioli]
  + Consistently strip top-level network key (#1417) (LP: #1906187)
  + testing: Fix LXD VM metadata test (#1430)
  + testing: Add NoCloud setup for NoCloud test (#1425)
  + Update linters and adapt code for compatibility (#1434) [Paride Legovini]
  + run-container: add support for LXD VMs (#1428) [Paride Legovini]
  + integration-reqs: bump pycloudlib pinned commit (#1427) [Paride Legovini]
  + Fix NoCloud docs (#1423)
  + Docs fixes (#1406)
  + docs: Add docs for module creation (#1415)
  + Remove cheetah from templater (#1416)
  + tests: verify_ordered_items fallback to re.escape if needed (#1420)
  + Misc module cleanup (#1418)
  + docs: Fix doc warnings and enable errors (#1419)
    [Alberto Contreras] (LP: #1876341)
  + Refactor cloudinit.sources.NetworkConfigSource to enum (#1413)
    [Alberto Contreras] (LP: #1874875)
  + Don't fail if IB and Ethernet devices 'collide' (#1411)
  + Use cc_* module meta defintion over hardcoded vars (SC-888) (#1385)
  + Fix cc_rsyslog.py initialization (#1404) [Alberto Contreras]
  + Promote cloud-init schema from devel to top level subcommand (#1402)
  + mypy: disable missing imports warning for httpretty (#1412)
    [Chris Patterson]
  + users: error when home should not be created AND ssh keys provided
    [Jeffrey 'jf' Lim]
  + Allow growpart to resize encrypted partitions (#1316)
  + Fix typo in integration_test.rst (#1405) [Alberto Contreras]
  + cloudinit.net refactor: apply_network_config_names (#1388)
    [Alberto Contreras] (LP: #1884602)
  + tests/azure: add fixtures for hardcoded paths (markers and data_dir)
    (#1399) [Chris Patterson]
  + testing: Add responses workaround for focal/impish (#1403)
  + cc_ssh_import_id: fix is_key_in_nested_dict to avoid early False
  + Fix ds-identify not detecting NoCloud seed in config (#1381)
    (LP: #1876375)
  + sources/azure: retry dhcp for failed processes (#1401) [Chris Patterson]
  + Move notes about refactorization out of CONTRIBUTING.rst (#1389)
  + Shave ~8ms off generator runtime (#1387)
  + Fix provisioning dhcp timeout to 20 minutes (#1394) [Chris Patterson]
  + schema: module example strict testing fix seed_random
  + cc_set_hostname: examples small typo (perserve vs preserve)
    [Wouter Schoot]
  + sources/azure: refactor http_with_retries to remove **kwargs (#1392)
    [Chris Patterson]
  + declare dependency on ssh-import-id (#1334)
  + drop references to old dependencies and old centos script
  + sources/azure: only wait for primary nic to be attached during restore
    (#1378) [Anh Vo]
  + cc_ntp: migrated legacy schema to cloud-init-schema.json (#1384)
  + Network functions refactor and bugfixes (#1383)
  + schema: add JSON defs for modules cc_users_groups (#1379)
    (LP: #1858930)
  + Fix doc typo (#1382) [Alberto Contreras]
  + Add support for dual stack IPv6/IPv4 IMDS to Ec2 (#1160)
  + Fix KeyError when rendering sysconfig IPv6 routes (#1380) (LP: #1958506)
  + Return a namedtuple from subp() (#1376)
  + Mypy stubs and other tox maintenance (SC-920) (#1374)
  + Distro Compatibility Fixes (#1375)
  + Pull in Gentoo patches (#1372)
  + schema: add json defs for modules U-Z (#1360)
    (LP: #1858928, #1858929, #1858931, #1858932)
  + util: atomically update sym links to avoid Suppress FileNotFoundError
  + when reading status (#1298) [Adam Collard] (LP: #1962150)
  + schema: add json defs for modules scripts-timezone (SC-801) (#1365)
  + docs: Add first tutorial (SC-900) (#1368)
  + BUG 1473527: module ssh-authkey-fingerprints fails Input/output error…
    (#1340) [Andrew Lee] (LP: #1473527)
  + add arch hosts template (#1371)
  + ds-identify: detect LXD for VMs launched from host with &gt; 5.10 kernel
    (#1370) (LP: #1968085)
  + Support EC2 tags in instance metadata (#1309) [Eduardo Dobay]
  + schema: add json defs for modules e-install (SC-651) (#1366)
  + Improve "(no_create_home|system): true" test (#1367) [Jeffrey 'jf' Lim]
  + Expose https_proxy env variable to ssh-import-id cmd (#1333)
    [Michael Rommel]
  + sources/azure: remove bind/unbind logic for hot attached nic (#1332)
    [Chris Patterson]
  + tox: add types-* packages to check_format env (#1362)
  + tests: python 3.10 is showing up in cloudimages (#1364)
  + testing: add additional mocks to test_net tests (#1356) [yangzz-97]
  + schema: add JSON schema for mcollective, migrator and mounts modules
    (#1358)
  + Honor system locale for RHEL (#1355) [Wei Shi]
  + doc: Fix typo in cloud-config-run-cmds.txt example (#1359) [Ali Shirvani]
  + ds-identify: also discover LXD by presence from DMI board_name = LXD
    (#1311)
  + black: bump pinned version to 22.3.0 to avoid click dependency issues
    (#1357)
  + Various doc fixes (#1330)
  + testing: Add missing is_FreeBSD mock to networking test (#1353)
  + Add --no-update to add-apt-repostory call (SC-880) (#1337)
  + schema: add json defs for modules K-L (#1321)
    (LP: #1858899, #1858900, #1858901, #1858902)
  + docs: Re-order readthedocs install (#1354)
  + Stop cc_ssh_authkey_fingerprints from ALWAYS creating home (#1343)
    [Jeffrey 'jf' Lim]
  + docs: add jinja2 pin (#1352)
  + Vultr: Use find_candidate_nics, use ipv6 dns (#1344) [eb3095]
  + sources/azure: move get_ip_from_lease_value out of shim (#1324)
    [Chris Patterson]
  + Fix cloud-init status --wait when no datasource found (#1349)
    (LP: #1966085)
  + schema: add JSON defs for modules resize-salt (SC-654) (#1341)
  + Add myself as a future contributor (#1345) [Neal Gompa (ニール・ゴンパ)]
  + Update .github-cla-signers (#1342) [Jeffrey 'jf' Lim]
  + add Requires=cloud-init-hotplugd.socket in cloud-init-hotplugd.service
  + file (#1335) [yangzz-97]
  + Fix sysconfig render when set-name is missing (#1327)
    [Andrew Kutz] (LP: #1855945)
  + Refactoring helper funcs out of NetworkState (#1336) [Andrew Kutz]
  + url_helper: add tuple support for readurl timeout (#1328)
    [Chris Patterson]
  + Make fs labels match for ds-identify and docs (#1329)
  + Work around bug in LXD VM detection (#1325)
  + Remove redundant generator logs (#1318)
  + tox: set verbose flags for integration tests (#1323) [Chris Patterson]
  + net: introduce find_candidate_nics() (#1313) [Chris Patterson]
  + Revert "Ensure system_cfg read before ds net config on Oracle (#1174)"
    (#1326)
  + Add vendor_data2 support for ConfigDrive source (#1307) [cvstealth]
  + Make VMWare data source test host independent and expand testing (#1308)
    [Robert Schweikert]
  + Add json schemas for modules starting with P
  + sources/azure: remove lease file parsing (#1302) [Chris Patterson]
  + remove flaky test from ci (#1322)
  + ci: Switch to python 3.10 in Travis CI (#1320)
  + Better interface handling for Vultr, expect unexpected DHCP servers
    (#1297) [eb3095]
  + Remove unused init local artifact (#1315)
  + Doc cleanups (#1317)
  + docs improvements (#1312)
  + add support for jinja do statements, add unit test (#1314)
    [Paul Bruno] (LP: #1962759)
  + sources/azure: prevent tight loops for DHCP retries (#1285)
    [Chris Patterson]
  + net/dhcp: surface type of DHCP lease failure to caller (#1276)
    [Chris Patterson]
  + Stop hardcoding systemctl location (#1278) [Robert Schweikert]
  + Remove python2 syntax from docs (#1310)
  + [tools/migrate-lp-user-to-github] Rename master branch to main (#1301)
    [Adam Collard]
  + redhat: Depend on "hostname" package (#1288) [Lubomir Rintel]
  + Add native NetworkManager support (#1224) [Lubomir Rintel]
  + Fix link in CLA check to point to contribution guide. (#1299)
    [Adam Collard]
  + check for existing symlink while force creating symlink (#1281)
    [Shreenidhi Shedi]
  + Do not silently ignore integer uid (#1280) (LP: #1875772)
  + tests: create a IPv4/IPv6 VPC in Ec2 integration tests (#1291)
  + Integration test fix ppa  (#1296)
  + tests: on official EC2. cloud-id actually startswith aws not ec2 (#1289)
  + test_ppa_source: accept both http and https URLs (#1292)
    [Paride Legovini]
  + Fix apt test on azure
  + add "lkundrak" as contributor [Lubomir Rintel]
  + Holmanb/integration test fix ppa (#1287)
  + Include missing subcommand in manpage (#1279)
  + Clean up artifacts from pytest, packaging, release with make clean
    (#1277)
  + sources/azure: ensure retries on IMDS request failure (#1271)
    [Chris Patterson]
  + sources/azure: removed unused savable PPS paths (#1268) [Chris Patterson]
  + integration tests: fix Azure failures (#1269)
  From 22.1
  + sources/azure: report ready in local phase (#1265) [Chris Patterson]
  + sources/azure: validate IMDS network configuration metadata (#1257)
    [Chris Patterson]
  + docs: Add more details to runcmd docs (#1266)
  + use PEP 589 syntax for TypeDict (#1253)
  + mypy: introduce type checking (#1254) [Chris Patterson]
  + Fix extra ipv6 issues, code reduction and simplification (#1243) [eb3095]
  + tests: when generating crypted password, generate in target env (#1252)
  + sources/azure: address mypy/pyright typing complaints (#1245)
    [Chris Patterson]
  + Docs for x-shellscript* userdata (#1260)
  + test_apt_security: azure platform has specific security URL overrides
    (#1263)
  + tests: lsblk --json output changes mountpoint key to mountpoinst []
    (#1261)
  + mounts: fix mount opts string for ephemeral disk (#1250)
    [Chris Patterson]
  + Shell script handlers by freq (#1166) [Chris Lalos]
  + minor improvements to documentation (#1259) [Mark Esler]
  + cloud-id: publish /run/cloud-init/cloud-id-&lt;cloud-type&gt; files (#1244)
  + add "eslerm" as contributor (#1258) [Mark Esler]
  + sources/azure: refactor ssh key handling (#1248) [Chris Patterson]
  + bump pycloudlib (#1256)
  + sources/hetzner: Use EphemeralDHCPv4 instead of static configuration
    (#1251) [Markus Schade]
  + bump pycloudlib version (#1255)
  + Fix IPv6 netmask format for sysconfig (#1215) [Harald] (LP: #1959148)
  + sources/azure: drop debug print (#1249) [Chris Patterson]
  + tests: do not check instance.pull_file().ok() (#1246)
  + sources/azure: consolidate ephemeral DHCP configuration (#1229)
    [Chris Patterson]
  + cc_salt_minion freebsd fix for rc.conf (#1236)
  + sources/azure: fix metadata check in _check_if_nic_is_primary() (#1232)
    [Chris Patterson]
  + Add _netdev option to mount Azure ephemeral disk (#1213) [Eduardo Otubo]
  + testing: stop universally overwriting /etc/cloud/cloud.cfg.d (#1237)
  + Integration test changes (#1240)
  + Fix Gentoo Locales (#1205)
  + Add "slingamn" as contributor (#1235) [Shivaram Lingamneni]
  + integration: do not LXD bind mount /etc/cloud/cloud.cfg.d (#1234)
  + Integration testing docs and refactor (#1231)
  + vultr: Return metadata immediately when found (#1233) [eb3095]
  + spell check docs with spellintian (#1223)
  + docs: include upstream python version info (#1230)
  + Schema a d (#1211)
  + Move LXD to end ds-identify DSLIST (#1228) (LP: #1959118)
  + fix parallel tox execution (#1214)
  + sources/azure: refactor _report_ready_if_needed and _poll_imds (#1222)
    [Chris Patterson]
  + Do not support setting up archive.canonical.com as a source (#1219)
    [Steve Langasek] (LP: #1959343)
  + Vultr: Fix lo being used for DHCP, try next on cmd fail (#1208) [eb3095]
  + sources/azure: refactor _should_reprovision[_after_nic_attach]() logic
    (#1206) [Chris Patterson]
  + update ssh logs to show ssh private key gens pub and simplify code
    (#1221) [Steve Weber]
  + Remove mitechie from stale PR github action (#1217)
  + Include POST format in cc_phone_home docs (#1218) (LP: #1959149)
  + Add json parsing of ip addr show (SC-723) (#1210)
  + cc_rsyslog: fix typo in docstring (#1207) [Louis Sautier]
  + Update .github-cla-signers (#1204) [Chris Lalos]
  + sources/azure: drop unused case in _report_failure() (#1200)
    [Chris Patterson]
  + sources/azure: always initialize _ephemeral_dhcp_ctx on unpickle (#1199)
    [Chris Patterson]
  + Add support for gentoo templates and cloud.cfg (#1179) [vteratipally]
  + sources/azure: unpack ret tuple in crawl_metadata() (#1194)
    [Chris Patterson]
  + tests: focal caplog has whitespace indentation for multi-line logs
    (#1201)
  + Seek interfaces, skip dummy interface, fix region codes (#1192) [eb3095]
  + integration: test against the Ubuntu daily images (#1198)
    [Paride Legovini]
  + cmd: status and cloud-id avoid change in behavior for 'not run' (#1197)
  + tox: pass PYCLOUDLIB_* env vars into integration tests when present
    (#1196)
  + sources/azure: set ovf_is_accessible when OVF is read successfully
    (#1193) [Chris Patterson]
  + Enable OVF environment transport via ISO in example (#1195) [Megian]
  + sources/azure: consolidate DHCP variants to EphemeralDHCPv4WithReporting
    (#1190) [Chris Patterson]
  + Single JSON schema validation in early boot (#1175)
  + Add DatasourceOVF network-config propery to Ubuntu OVF example (#1184)
    [Megian]
  + testing: support pycloudlib config file (#1189)
  + Ensure system_cfg read before ds net config on Oracle (SC-720) (#1174)
    (LP: #1956788)
  + Test Optimization Proposal (SC-736) (#1188)
  + cli: cloud-id report not-run or disabled state as cloud-id (#1162)
  + Remove distutils usage (#1177) [Shreenidhi Shedi]
  + add .python-version to gitignore (#1186)
  + print error if datasource import fails (#1170)
    [Emanuele Giuseppe Esposito]
  + Add new config module to set keyboard layout (#1176)
    [maxnet] (LP: #1951593)
  + sources/azure: rename metadata_type -&gt; MetadataType (#1181)
    [Chris Patterson]
  + Remove 3.5 and xenial support (SC-711) (#1167)
  + tests: mock LXD datasource detection in ds-identify on LXD containers
    (#1178)
  + pylint: silence errors on compat code for old jsonschema (#1172)
    [Paride Legovini]
  + testing: Add 3.10 Test Coverage (#1173)
  + Remove unittests from integration test job in travis (#1141)
  + Don't throw exceptions for empty cloud config (#1130)
  + bsd/resolv.d/ avoid duplicated entries (#1163) [Gonéri Le Bouder]
  + sources/azure: do not persist failed_desired_api_version flag (#1159)
    [Chris Patterson]
  + Update cc_ubuntu_advantage calls to assume-yes (#1158)
    [John Chittum] (LP: #1954842)
  + openbsd: properly restart the network on 7.0 (#1150) [Gonéri Le Bouder]
  + Add .git-blame-ignore-revs (#1161)
  + Adopt Black and isort (SC-700) (#1157)
  + Include dpkg frontend lock in APT_LOCK_FILES (#1153)
  + tests/cmd/query: fix test run as root and add coverage for defaults
    (#1156) [Chris Patterson] (LP: #1825027)
  + Schema processing changes (SC-676) (#1144)
  + Add dependency workaround for impish in bddeb (#1148)
  + netbsd: install new dep packages (#1151) [Gonéri Le Bouder]
  + find_devs_with_openbsd: ensure we return the last entry (#1149)
    [Gonéri Le Bouder]
  + sources/azure: remove unnecessary hostname bounce (#1143)
    [Chris Patterson]
  + find_devs/openbsd: accept ISO on disk (#1132)
    [Gonéri Le Bouder]
  + Improve error log message when mount failed (#1140) [Ksenija Stanojevic]
  + add KsenijaS as a contributor (#1145) [Ksenija Stanojevic]
  + travis - don't run integration tests if no deb (#1139)
  + factor out function for getting top level directory of cloudinit (#1136)
  + testing: Add deterministic test id (#1138)
  + mock sleep() in azure test (#1137)
  + Add miraclelinux support (#1128) [Haruki TSURUMOTO]
  + docs: Make MACs lowercase in network config (#1135) (LP: #1876941)
  + Add Strict Metaschema Validation (#1101)
  + update dead link (#1133)
  + cloudinit/net: handle two different routes for the same ip (#1124)
    [Emanuele Giuseppe Esposito]
  + docs: pin mistune dependency (#1134)
  + Reorganize unit test locations under tests/unittests (#1126)
  + Fix exception when no activator found (#1129) (LP: #1948681)
  + jinja: provide and document jinja-safe key aliases in instance-data
    (SC-622) (#1123)
  + testing: Remove date from final_message test (SC-638) (#1127)
  + Move GCE metadata fetch to init-local (SC-502) (#1122)
  + Fix missing metadata routes for vultr (#1125) [eb3095]
  + cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console
    (#1081) [dermotbradley]
  + sources/azure: remove unused remnants related to agent command (#1119)
    [Chris Patterson]
  + github: update PR template's contributing URL (#1120) [Chris Patterson]
  + docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
  + testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
  + Fix Vultr timeout and wait values (#1113) [eb3095]
  + lxd: add preference for LXD cloud-init.* config keys over user keys
    (#1108)
  + VMware: source /etc/network/interfaces.d/* on Debian
    [chengcheng-chcheng] (LP: #1950136)
  + Add cjp256 as contributor (#1109) [Chris Patterson]
  + integration_tests: Ensure log directory exists before symlinking to it
    (#1110)
  + testing: add growpart integration test (#1104)
  + integration_test: Speed up CI run time (#1111)
  + Some miscellaneous integration test fixes (SC-606) (#1103)
  + tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
  + Add convenience symlink to integration test output (#1105)
  + Fix for set-name bug in networkd renderer (#1100)
    [Andrew Kutz] (LP: #1949407)
  + Wait for apt lock (#1034) (LP: #1944611)
  + testing: stop chef test from running on openstack (#1102)
  + alpine.py: add options to the apk upgrade command (#1089) [dermotbradley]</changelog>
  <changelog author="rjschwei@suse.com" date="1675166400">- Add cloud-init-prefer-nm.patch
  + Prefer NetworkManager of sysconfig when available</changelog>
  <changelog author="rjschwei@suse.com" date="1675425600">- Add cloud-init-transact-up.patch to support transactional-updates</changelog>
  <changelog author="rjschwei@suse.com" date="1677153600">- Update to version 23.1
  + Remove patches included upstream:
  - cloud-init-btrfs-queue-resize.patch
  - cloud-init-micro-is-suse.patch
  - cloud-init-suse-afternm.patch
  - cloud-init-prefer-nm.patch
  - cloud-init-transact-up.patch
  + Forward port
  - cloud-init-write-routes.patch
  + Added
  - cloud-init-fix-ca-test.patch
  + Support transactional-updates for SUSE based distros (#1997)
    [Robert Schweikert]
  + Set ownership for new folders in Write Files Module (#1980)
    [Jack] (LP: #1990513)
  + add OpenCloudOS and TencentOS support (#1964) [wynnfeng]
  + lxd: Retry if the server isn't ready (#2025)
  + test: switch pycloudlib source to pypi (#2024)
  + test: Fix integration test deprecation message (#2023)
  + Recognize opensuse-microos, dev tooling fixes [Robert Schweikert]
  + sources/azure: refactor imds handler into own module (#1977)
    [Chris Patterson]
  + docs: deprecation generation support [1/2] (#2013)
  + add function is_virtual to distro/FreeBSD (#1957) [Mina Galić]
  + cc_ssh: support multiple hostcertificates (#2018) (LP: #1999164)
  + Fix minor schema validation regression and fixup typing (#2017)
  + doc: Reword user data debug section (#2019)
  + Overhaul/rewrite of certificate handling as follows: (#1962)
    [dermotbradley] (LP: #1931174)
  + disk_setup: use byte string when purging the partition table (#2012)
    [Stefan Prietl]
  + cli: schema also validate vendordata*.
  + ci: sort and add checks for cla signers file [Stefan Prietl]
  + Add "ederst" as contributor (#2010) [Stefan Prietl]
  + readme: add reference to packages dir (#2001)
  + docs: update downstream package list (#2002)
  + docs: add google search verification (#2000) [s-makin]
  + docs: fix 404 render use default notfound_urls_prefix in RTD conf (#2004)
  + Fix OpenStack datasource detection on bare metal (#1923)
    [Alexander Birkner] (LP: #1815990)
  + docs: add themed RTD 404 page and pointer to readthedocs-hosted (#1993)
  + schema: fix gpt labels, use type string for GUID (#1995)
  + cc_disk_setup: code cleanup (#1996)
  + netplan: keep custom strict perms when 50-cloud-init.yaml exists
  + cloud-id: better handling of change in datasource files
    [d1r3ct0r] (LP: #1998998)
  + tests: Remove restart check from test
  + Ignore duplicate macs from mscc_felix and fsl_enetc (LP: #1997922)
  + Warn on empty network key (#1990)
  + Fix Vultr cloud_interfaces usage (#1986) [eb3095]
  + cc_puppet: Update puppet service name (#1970) [d1r3ct0r] (LP: #2002969)
  + docs: Clarify networking docs (#1987)
  + lint: remove httpretty (#1985) [sxt1001]
  + cc_set_passwords: Prevent traceback when restarting ssh (#1981)
  + tests: fix lp1912844 (#1978)
  + tests: Skip ansible test on bionic (#1984)
  + Wait for NetworkManager (#1983) [Robert Schweikert]
  + docs: minor polishing (#1979) [s-makin]
  + CI: migrate integration-test to GH actions (#1969)
  + Fix permission of SSH host keys (#1971) [Ron Gebauer]
  + Fix default route rendering on v2 ipv6 (#1973) (LP: #2003562)
  + doc: fix path in net_convert command (#1975)
  + docs: update net_convert docs (#1974)
  + doc: fix dead link
  + cc_set_hostname: ignore /var/lib/cloud/data/set-hostname if it's empty
    (#1967) [Emanuele Giuseppe Esposito]
  + distros/rhel.py: _read_hostname() missing strip on "hostname" (#1941)
    [Mark Mielke]
  + integration tests: add  IBM VPC support (SC-1352) (#1915)
  + machine-id: set to uninitialized to trigger regeneration on clones
    (LP: #1999680)
  + sources/azure: retry on connection error when fetching metdata (#1968)
    [Chris Patterson]
  + Ensure ssh state accurately obtained (#1966)
  + bddeb: drop dh-systemd dependency on newer deb-based releases [d1r3ct0r]
  + doc: fix `config formats` link in cloudsigma.rst (#1960)
  + Fix wrong subp syntax in cc_set_passwords.py (#1961)
  + docs: update the PR template link to readthedocs (#1958) [d1r3ct0r]
  + ci: switch unittests to gh actions (#1956)
  + Add mount_default_fields for PhotonOS. (#1952) [Shreenidhi Shedi]
  + sources/azure: minor refactor for metadata source detection logic
    (#1936) [Chris Patterson]
  + add "CalvoM" as contributor (#1955) [d1r3ct0r]
  + ci: doc to gh actions (#1951)
  + lxd: handle 404 from missing devices route for LXD 4.0 (LP: #2001737)
  + docs: Diataxis overhaul (#1933) [s-makin]
  + vultr: Fix issue regarding cache and region codes (#1938) [eb3095]
  + cc_set_passwords: Move ssh status checking later (SC-1368) (#1909)
    (LP: #1998526)
  + Improve Wireguard module idempotency (#1940) [Fabian Lichtenegger-Lukas]
  + network/netplan: add gateways as on-link when necessary (#1931)
    [Louis Sautier] (LP: #2000596)
  + tests: test_lxd assert features.networks.zones when present (#1939)
  + Use btrfs enquque when available (#1926) [Robert Schweikert]
  + sources/azure: drop description for report_failure_to_fabric() (#1934)
    [Chris Patterson]
  + cc_disk_setup.py: fix MBR single partition creation (#1932)
    [dermotbradley] (LP: #1851438)
  + Fix typo with package_update/package_upgrade (#1927) [eb3095]
  + sources/azure: fix device driver matching for net config (#1914)
    [Chris Patterson]
  + BSD: fix duplicate macs in Ifconfig parser (#1917) [Mina Galić]
  + test: mock dns calls (#1922)
  + pycloudlib: add lunar support for integration tests (#1928)
  + nocloud: add support for dmi variable expansion for seedfrom URL
    (LP: #1994980)
  + tools: read-version drop extra call to git describe --long
  + doc: improve cc_write_files doc (#1916)
  + read-version: When insufficient tags, use cloudinit.version.get_version
  + mounts: document weird prefix in schema (#1913)
  + add utility function test cases (#1910) [sxt1001]
  + test: mock file deletion in dhcp tests (#1911)
  + Ensure network ready before cloud-init service runs on RHEL (#1893)
    (LP: #1998655)
  + docs: add copy button to code blocks (#1890) [s-makin]
  + netplan: define features.NETPLAN_CONFIG_ROOT_READ_ONLY flag
  + azure: fix support for systems without az command installed (#1908)
  + Networking Clarification (#1892)
  + Fix the distro.osfamily output problem in the openEuler system. (#1895)
    [sxt1001] (LP: #1999042)
  + pycloudlib: bump commit dropping azure api smoke test
  + net: netplan config root read-only as wifi config can contain creds
  + autoinstall: clarify docs for users
  + sources/azure: encode health report as utf-8 (#1897) [Chris Patterson]
  + Add back gateway4/6 deprecation to docs (#1898)
  + networkd: Add support for multiple [Route] sections (#1868)
    [Nigel Kukard]
  + doc: add qemu tutorial (#1863)
  + lint: fix tip-flake8 and tip-mypy (#1896)
  + Add support for setting uid when creating users on FreeBSD (#1888)
    [einsibjarni]
  + Fix exception in BSD networking code-path (#1894) [Mina Galić]
  + Append derivatives to is_rhel list in cloud.cfg.tmpl (#1887) [Louis Abel]
  + FreeBSD init: use cloudinit_enable as only rcvar (#1875) [Mina Galić]
  + feat: add support aliyun metadata security harden mode (#1865)
    [Manasseh Zhou]
  + docs: uprate analyze to performance page [s-makin]
  + test: fix lxd preseed managed network config (#1881)
  + Add support for static IPv6 addresses for FreeBSD (#1839) [einsibjarni]
  + Make 3.12 failures not fail the build (#1873)
  + Docs: adding relative links [s-makin]
  + Update read-version
  + Fix setup.py to align with PEP 440 versioning replacing trailing
  + travis: promote 3.11-dev to 3.11 (#1866)
  + test_cloud_sigma: delete useless test (#1828) [sxt1001]
  + Add "nkukard" as contributor (#1864) [Nigel Kukard]
  + tests: ds-id mocks for vmware-rpctool as utility may not exist in env
  + doc: add how to render new module doc (#1855)
  + doc: improve module creation explanation (#1851)
  + Add Support for IPv6 metadata to OpenStack (#1805)
    [Marvin Vogt] (LP: #1906849)
  + add xiaoge1001 to .github-cla-signers (#1854) [sxt1001]
  + network: Deprecate gateway{4,6} keys in network config v2 (#1794)
    (LP: #1992512)
  + VMware: Move Guest Customization transport from OVF to VMware (#1573)
    [PengpengSun]
  + doc: home page links added (#1852) [s-makin]
  From 22.4.2
  + status: handle ds not defined in status.json (#1876) (LP: #1997559)
  From 22.4.1
  + net: skip duplicate mac check for netvsc nic and its VF (#1853)
    [Anh Vo] (LP: #1844191)
  + ChangeLog: whitespace cleanup (#1850)
  + changelog: capture 22.3.1-4 releases</changelog>
  <changelog author="rjschwei@suse.com" date="1681214400">- Sensitive data exposure (bsc#1210277, CVE-2023-1786)
  + Add hidesensitivedata
  + Add cloud-init-cve-2023-1786-redact-inst-data.patch
  + Do not expose sensitive data gathered from the CSP</changelog>
</package>
<package pkgid="0d5534f9ba4478a3718f89f6233ee0cc669229d305d955cd26134f3237dc3f67" name="cluster-md-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="a9f4d4b710f05041590db4f366d2822de926be9e1be49f867dc427a6f7ece86b" name="cluster-md-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="35452e92397a66e960a20753fa4d159fc53ee649a65e76254134d08cf1964a96" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b72bc37145c7ffd7e67fcb3a51b943d21d2d0aa93bea75648d666d5c5b8544c1" name="containerd" arch="ppc64le">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="6e2b23cc362cfcec84792bb3bf2a90cdf5104d5f267d5eb8dc724146278249cf" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="a9502efb0fb280c7a99422748f26ce7386399f19646e094e67e2c0c010efceec" name="containerd" arch="src">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ba167df73b6f5f67237d27f7d90e55a3e869077953aa9537b2fb56756e433e5e" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="5d3b9b0ddf69fcffbf38e47d37f4c7bb483260bad42a00c4e06ba57ebcee5312" name="containerd-ctr" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="9da9e8464980c4f8564f6dbb855781838570f1b5952f6610b04fd6286413cf26" name="containerd-ctr" arch="ppc64le">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="434f16e2c9ef82aec6c6147979d0eea0f3ae116b85e6ce39900c356c5c75ef54" name="containerd-ctr" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="53bbcb313c59d7d378637d025b274fa2e804ecb7ac009a25db45500fd5a2945b" name="containerd-ctr" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="2418558b402debdb54ff62383e7decb4fb6e22d94bf86a652062df54ed388673" name="containerd-devel" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="48fd1dd7d0101e83f5551a8cf0693248e98c1dee8a1cffa00a5d54fccc1f42bf" name="containerd-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="f868c824e77e6979011c638ff03c2450e86b1a8d296b3e2ad4115497abf08abf" name="containerd-devel" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ea32406899ba1f93599af3ad28124d088e6b5b71ea5b96ba23879a23170f8848" name="containerd-devel" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ce65fee07f79c3f1fb1aaaf3bef109b9f94a1908c1ce1a16b86f9c576da99a69" name="corepack18" arch="aarch64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="9ebc56d6e7cede8e8e44777bf6d6af9a01b8697cc490e68401c25c615b0daffb" name="corepack18" arch="s390x">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="c27955c9f70c6fc9dd72b35eb31d4ce09aa01f2b8f5878faaf6a5c497f6a2a1b" name="corepack18" arch="x86_64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="1b4be633fffc1aabef5f439370e5447ca9435edc0d510c32150fbb9ae60a0aee" name="corepack18" arch="aarch64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="bf6f13e9aaf79ebaeaa734b9b6c43e335e73e068d63e642e728a9ef481f91bec" name="corepack18" arch="ppc64le">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="993ae85363b277e0004078954949d1b038b02c8f51c80f85ece43c7c84dda806" name="corepack18" arch="s390x">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="862379498dbc384f07b750be287371f72f418c02457aae7154305167035f6efb" name="corepack18" arch="x86_64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="a0d209518e3caa3e23f60c41ff52d88b8dadd382d5f8fd8d9382e02ebd64958f" name="cosign" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="9603c137627b635cca4136e00e8595645404202091d8fe664ff311bcedaa21b5" name="cosign" arch="ppc64le">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="85f5b69fd602701c92d4955f157827e9d77df122e10faa50806ce0fa0abec27a" name="cosign" arch="s390x">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="40772f2aedb723f898b22c66686cfaa204ada721f762346575dbb09638413537" name="cosign" arch="src">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="2b17896075d252e2d3af9519b8ba091c88d09c777eae2e7231d5695bb0396d59" name="cosign" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="150400.3.11.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="a3736b4ec4143e32868bcc02a60ce27fbacc6fd89500341cba8f14aeb6fe383a" name="cosign" arch="aarch64">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="eb25d63eb0f68bad7b16fa63a32772f19effdb11b8eb852f83d0479df3c34d2f" name="cosign" arch="ppc64le">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="2ca27a6f9b93072d76d2cfc607e6c24104be30b587662884ffac4102134ad9cf" name="cosign" arch="s390x">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="cbe00f0f9d682ec2e9a17aad3b0bed0092538d075a9a940bde67620c461548d7" name="cosign" arch="src">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="a58f5fe9308e4aeeb714f39cf66be687c47d64578528bea54117897632b659d1" name="cosign" arch="x86_64">
  <version epoch="0" ver="2.0.1" rel="150400.3.9.1"/>
  <changelog author="meissner@suse.com" date="1641470400">- cosign 1.4.1 release, initial import
- provides signing / verification support for sigstore</changelog>
  <changelog author="bwiedemann@suse.com" date="1643112000">- Fix BUILD_DATE for reproducible build results (boo#1047218)</changelog>
  <changelog author="meissner@suse.com" date="1643112001">- updated to 1.5.0
  [#]# Highlights
  * enable sbom generation when releasing (https://github.com/sigstore/cosign/pull/1261)
  * feat: log error to stderr (https://github.com/sigstore/cosign/pull/1260)
  * feat: support attach attestation (https://github.com/sigstore/cosign/pull/1253)
  * feat: resolve --cert from URL (https://github.com/sigstore/cosign/pull/1245)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1237)
  * feat: vuln attest support (https://github.com/sigstore/cosign/pull/1168)
  * feat: add ambient credential detection with spiffe/spire (https://github.com/sigstore/cosign/pull/1220)
  * feat: generate/upload sbom for cosign projects (https://github.com/sigstore/cosign/pull/1236)
  * feat: implement cosign download attestation (https://github.com/sigstore/cosign/pull/1216)
  [#]# Enhancements
  * Don't use k8schain, statically link cloud cred helpers in cosign (https://github.com/sigstore/cosign/pull/1279)
  * Export function to verify individual signature (https://github.com/sigstore/cosign/pull/1334)
  * Add suffix with digest to signature file output for recursive signing (https://github.com/sigstore/cosign/pull/1267)
  * Take OIDC client secret into account (https://github.com/sigstore/cosign/pull/1310)
  * Add --bundle flag to sign-blob and verify-blob (https://github.com/sigstore/cosign/pull/1306)
  * Add flag to verify OIDC issuer in certificate (https://github.com/sigstore/cosign/pull/1308)
  * add OSSF scorecard action (https://github.com/sigstore/cosign/pull/1318)
  * Add TUF timestamp to attestation bundle (https://github.com/sigstore/cosign/pull/1316)
  * Provide certificate flags to all verify commands (https://github.com/sigstore/cosign/pull/1305)
  * Bundle TUF timestamp with signature on signing (https://github.com/sigstore/cosign/pull/1294)
  * Add support for importing PKCShttps://github.com/sigstore/cosign/pull/8 private keys, and add validation (https://github.com/sigstore/cosign/pull/1300)
  * add error message (https://github.com/sigstore/cosign/pull/1296)
  * Move bundle out of `oci` and into `bundle` package (https://github.com/sigstore/cosign/pull/1295)
  * Reorganize verify-blob code and add a unit test (https://github.com/sigstore/cosign/pull/1286)
  * One-to-one mapping of invocation to scan result (https://github.com/sigstore/cosign/pull/1268)
  * refactor common utilities (https://github.com/sigstore/cosign/pull/1266)
  * Importing RSA and EC keypairs (https://github.com/sigstore/cosign/pull/1050)
  * Refactor the tuf client code. (https://github.com/sigstore/cosign/pull/1252)
  * Moved certificate output before checking for upload during signing (https://github.com/sigstore/cosign/pull/1255)
  * Remove remaining ioutil usage (https://github.com/sigstore/cosign/pull/1256)
  * Update the embedded TUF metadata. (https://github.com/sigstore/cosign/pull/1251)
  * Add support for other public key types for SCT verification, allow override for testing. (https://github.com/sigstore/cosign/pull/1241)
  * Log the proper remote repo for the signatures on verify (https://github.com/sigstore/cosign/pull/1243)
  * Do not require multiple Fulcio certs in the TUF root (https://github.com/sigstore/cosign/pull/1230)
  * clean up references to 'keyless' in `ephemeral.Signer` (https://github.com/sigstore/cosign/pull/1225)
  * create `DSSEAttestor` interface, `payload.DSSEAttestor` implementation (https://github.com/sigstore/cosign/pull/1221)
  * use `mutate.Signature` in the new `Signer`s (https://github.com/sigstore/cosign/pull/1213)
  * create `mutate` functions for `oci.Signature` (https://github.com/sigstore/cosign/pull/1199)
  * add a writeable `$HOME` for the `nonroot` cosigned user (https://github.com/sigstore/cosign/pull/1209)
  * signing attestation should private key (https://github.com/sigstore/cosign/pull/1200)
  * Remove the "upload" flag for "cosign initialize" (https://github.com/sigstore/cosign/pull/1201)
  * create KeylessSigner (https://github.com/sigstore/cosign/pull/1189)
  [#]# Bug Fixes
  * fix: cosign verify for vault (https://github.com/sigstore/cosign/pull/1328)
  * fix missing goimports (https://github.com/sigstore/cosign/pull/1327)
  * Fix TestSignBlobBundle (https://github.com/sigstore/cosign/pull/1320)
  * Fix a couple bugs in cert verification for blobs (https://github.com/sigstore/cosign/pull/1287)
  * Fix a few bugs in cosign initialize (https://github.com/sigstore/cosign/pull/1280)
  * Fix the unit tests with expired TUF metadata. (https://github.com/sigstore/cosign/pull/1270)
  * Fix output-file flag. (https://github.com/sigstore/cosign/pull/1264)
  * fix: typo in the error message (https://github.com/sigstore/cosign/pull/1250)
  * Fix semantic bugs in attestation verifification. (https://github.com/sigstore/cosign/pull/1249)
  * Fix semantic bug in DSSE specification. (https://github.com/sigstore/cosign/pull/1248)
- vendor.tar.bz2: go mod vendor</changelog>
  <changelog author="meissner@suse.com" date="1645444800">- updated to 1.5.2:
  - This release contains fixes for CVE-2022-23649, affecting signature
    validations with Rekor. Only validation is affected, it is not necessary
    to re-sign any artifacts. (bsc#1196239)
- updated to 1.5.1:
  - Bump sigstore/sigstore to pick up oidc login for vault. (#1377)
  - Bump google.golang.org/api from 0.65.0 to 0.66.0 (#1371)
  - expose dafaults fulcio, rekor, oidc issuer urls (#1368)
  - add check to make sure the go modules are in sync (#1369)
  - README: fix link to race conditions (#1367)
  - Bump cloud.google.com/go/storage from 1.18.2 to 1.19.0 (#1365)
  - docs: verify-attestation cue and rego policy doc (#1362)
  - Update verify-blob to support DSSEs (#1355)
  - organize, update select deps (#1358)
  - Bump go-containerregistry to pick up ACR keychain fix (#1357)
  - Bump github.com/go-openapi/runtime from 0.21.0 to 0.21.1 (#1352)
  - sync go modules (#1353)</changelog>
  <changelog author="meissner@suse.com" date="1648814400">- updated to 1.6.0
  - Fix double time import in e2e tests by @saschagrunert in #1388
  - Add --timeout support to sign command by @saschagrunert in #1379
  - Fix comparison in replace option for attestation by @bburky in #1366
  - Add Cosign logo to README by @nsmith5 in #1395
  - Minor refactor to verify SCT and Rekor entry with multiple keys by @haydentherapper in #1396
  - Fix a link of SECURITY.md by @knqyf263 in #1399
  - update cosign and cross-build image for the release job by @cpanato in #1400
  - feat: login command by @developer-guy in #1398
  - TUF: Add root status output by @asraa in #1404
  - Add a newline after password input by @knqyf263 in #1407
  - make imageRef lowercase before parsing by @bobcallaway in #1409
  - Improve error message when image is not found in registry by @imjasonh in #1410
  - Add ability to override the Spiffe socket via environmental variable: by @vaikas in #1421
  - Fix incorrect error check when verifying SCT by @haydentherapper in #1422
  - Skip the ReadWrite test that flakes on Windows. by @dlorenc in #1415
  - Allow PassFunc to be nil by @saschagrunert in #1426
  - Update the cosign keyless documentation to point to the GA release. by @dlorenc in #1427
  - Remove TUF timestamp from OCI signature bundle by @haydentherapper in #1428
  - Add docs on API stability and deprecation table by @priyawadhwa in #1429
  - update cross-build image which adds goimports by @cpanato in #1435
  - feat: enhance clean cmd capability by @developer-guy in #1430
  - use the upstream kubernetes version lib and ldflags by @n3wscott in #1413
  - Improve log lines to match with implementation by @marcofranssen in #1432
  - feat: fig autocomplete feature by @developer-guy in #1360
  - update cross-build to use go 1.17.7 by @cpanato in #1446
  - Fetch verification targets by TUF custom metadata by @haydentherapper in #1423
  - feat: add -buildid= to ldflags by @developer-guy in #1451
  - Streamline SignBlobCmd API with SignCmd by @saschagrunert in #1454
  - convert release cosigned to also generate yaml artifact. by @k4leung4 in #1453
  - Fix tkn link in readme by @Yongxuanzhang in #1459
  - Print message when verifying with old TUF targets by @haydentherapper in #1468
  - fix(sign): refactor unsupported provider log by @Dentrax in #1464
  - tests: /bin/bash -&gt; /usr/bin/env bash by @znewman01 in #1470
  - Double goreleaser timeout by @znewman01 in #1472
  - increase timeout for goreleaser snapshot by @cpanato in #1473
  - fix(sign): kms unspported message by @Dentrax in #1475
  - refactor release cloudbuild job by @cpanato in #1476
  - Fix wording on attach attestation help by @luhring in #1480
  - update go-tuf and simplify TUF client code by @asraa in #1455
  - add initial changelog for 1.5.2 by @cpanato in #1483
  - Fix linter error on main by @priyawadhwa in #1484
  - Update Changelog for Security Advisory by @cpanato in #1485
  - chore(makefile): use kocache, convert publish to build by @developer-guy in #1488
  - Pick up a change to quiet ECR-login logging. by @mattmoor in #1491
  - feat: support other types in copy cmd by @developer-guy in #1493
  - Pick up some of the shared workflows by @mattmoor in #1490
  - feat: nominate Dentrax as codeowner by @developer-guy in #1492
  - add correct layer media type to cosign attach attestation by @spiffcs in #1503
  - This sets up the scaffolding for the cosigned CRD types. by @mattmoor in #1504
  - use v6 api calls in GH action for updating release milestones by @bobcallaway in #1511
  - Add skeleton reconciler for cosigned API CRD. by @mattmoor in #1513
  - bug fix: import ed25519 keys and fix error handling by @asraa in #1518
  - optimize codeql speed by using caching and tracing by @bobcallaway in #1519
  - Add a dummy.go file to allow vendoring config by @jdolitsky in #1520
  - Add CertExtensions func to extract all extensions by @ckotzbauer in #1515
  - chore(ci): add artifact hub support by @Dentrax in #1522
  - Change Fulcio URL default to be fulcio.sigstore.dev by @haydentherapper in #1529
  - Add codecov as github action, set permissions to read content only by @k4leung4 in #1530
  - images: remove --bare flags that conflict with --base-import-paths by @cpanato in #1533
  - Quay OCI Support in README by @sabre1041 in #1539
  - add rpm,deb and apks for cosign packages by @strongjz in #1537
  - Consistent parenthesis use in Makefile by @k4leung4 in #1541
  - add changelog for 1.6.0 by @cpanato in #1535
  - update golang cross image by @cpanato in #1543
  - Add fields in policy CRD by @kkavitha in #1540
  - Disable for now due some issues when downloading the knative module by @cpanato in #1546</changelog>
  <changelog author="meissner@suse.com" date="1650974400">- updated to 1.7.2
  - [Cosigned] Fix publicKey unmarshal by @DennyHoang in #1719
  - fix: add permissions to patch events by @hectorj2f in #1722
  - Make public all types required to use ValidatePolicy by @jdolitsky in #1727
  - Add unit tests for IntotoAttestation verifier. by @vaikas in #1728
  - Remove newline from download sbom output by @ribbybibby in #1732
  - Fix packages name and binary in the packages by @cpanato in #1734
  - Fix fulcioroots test and linter error by @haydentherapper in #1741
  - Support non-ECDSA public keys in certificates by @haydentherapper in #1740
  - bug: remove old fulcio root and fix fallback target code by @asraa in #1738
- updated to 1.7.1
  - pkcs11: fix build instructions by @rgerganov in #1550
  - add definition for artifact hub to verify the ownership by @cpanato in #1563
  - Add example using AWS Key Management Service (KMS) by @davivcgarcia in #1564
  - Start of the necessary pieces to get #1418 and #1419 implemented by @vaikas in #1562
  - Support deletion of ClusterImagePolicy by @vaikas in #1580
  - 1417 policy validations by @kkavitha in #1548
  - Don't lowercase input image refs, just fail by @imjasonh in #1586
  - Fix #1583 #1582. Disallow regex now until implemented. by @vaikas in #1584
  - Fix piping 'cosign verify' using fulcio/rekor by @marcofranssen in #1590
  - Fix #1592 move authorities as siblings of images. by @vaikas in #1593
  - Add ability to inline secrets from SecretRef to configmap. by @vaikas in #1595
  - Fix copy/paste mistake in repo name. by @k4leung4 in #1600
  - Use reusuable release workflow in sigstore/sigstore by @k4leung4 in #1599
  - Add public key validation by @kkavitha in #1598
  - Validate a public key in a secret is valid. by @vaikas in #1602
  - Ensure entry is removed from CM on secret error. by @vaikas in #1605
  - Add two env variables. One for using Rekor public key from OOB and one for fetching it from Rekor server by @vaikas in #1610
  - Init entity from ociremote when signing a digest ref by @puerco in #1616
  - rename ca-key to ca-cert. Fix 1608, 1613 by @vaikas in #1617
  - improve cosigned validation error messages by @cpanato in #1618
  - Use latest knative/pkg's configmap informer by @tcnghia in #1615
  - Included OpenSSF Best Practices Badge by @naveensrinivasan in #1628
  - FUN.md broke when RecordObj changed to HashedRecordObj by @MitchellJThomas in #1633
  - update crane to v0.8.0 release by @cpanato in #1635
  - push latest tag when building a release by @cpanato in #1636
  - Add extra label and change the latest tag to unstable for non tagged releases by @cpanato in #1637
  - Document Elastic container registry support by @mgreau in #1641
  - Validate authority keys by @coyote240 in #1623
  - feat: tree command utility by @developer-guy in #1603
  - fix build date format for version command by @cpanato in #1644
  - Add support for intermediate certificates when verifiying by @haydentherapper in #1631
  - Prompt user before running cosign clean by @priyawadhwa in #1649
  - Use ClusterImagePolicy with Keyless + e2e tests for CIP with kind by @vaikas in #1650
  - KEYLESS.md: Shorten example OAuth URL by @tstromberg in #1661
  - Use syscall.Stdin for input handle. Fixes #1153 by @mdp in #1657
  - Add support for certificate chain to verify certificate by @haydentherapper in #1659
  - First batch of followups to #1650 by @vaikas in #1664
  - Add certificate chain flag for signing by @haydentherapper in #1656
  - [attach]: Add specific suffixes mediaTypes to sboms by @hectorj2f in #1663
  - update font when output the cosign version by @cpanato in #1668
  - feat: add ability to override registry keychain by @noamichael in #1666
  - remove replace directive by @cpanato in #1669
  - Refactor based on discussions in #1650 by @vaikas in #1674
  - Find all valid entries in verify-blob by @priyawadhwa in #1673
  - Fix relative paths in Gitub OIDC blob test by @priyawadhwa in #1677
  - Add support for cert and cert chain flags with PKCS11 tokens by @haydentherapper in #1671
  - Use cosign @ HEAD for Github OIDC sign blob test by @priyawadhwa in #1678
  - Make cosign copy copy metadata attached to child images. by @mattmoor in #1682
  - change file_name_template to PackageName by @strongjz in #1683
  - Update error message for verify/verify attestation by @haydentherapper in #1686
  - cosign clean: Don't log failure if the registry responds with 404 by @imjasonh in #1687
  - verify: add leaf hash verification for tlog entries by @asraa in #1688
  - Fix handling of policy in verify-attestation by @lcarva in #1672
  - Add e2e test for attest / verify-attestation by @vaikas in #1685
  - verify: remove extra calls to rekor for verify and verify-blob by @asraa in #1694
  - Remove the hardcoded sigstore audience by @mattmoor in #1698
  - Use ValidatePubKey from sigstore/sigstore by @haydentherapper in #1676
  - Use the github actions from sigstore/scaffolding. by @vaikas in #1699
  - sign: set the oidc redirect uri by @hectorj2f in #1675
  - add back the go mod proxy by @cpanato in #1701
  - enable 1.23 tests (Test cosigned with ClusterImagePolicy) by @cpanato in #1702
  - Fix incorrect unmarshalling of SCT response by @haydentherapper in #1704
  - Make CLI flag for OIDC client secret take a path by @znewman01 in #1705
  - cosigned: read the public key from the kms authority by @hectorj2f in #1706
  - fix latest tag when running a release job by @cpanato in #1707
  - [Cosigned] Parse and store publicKey data earlier by @DennyHoang in #1681
  - Dont overwrite token set in keyOpts by @puerco in #1709
  - refactor release job by @cpanato in #1710</changelog>
  <changelog author="meissner@suse.com" date="1653134400">- updated to 1.8.0
  - Move the KMS integration imports into the binary entrypoints by @mattmoor in #1744
  - [Cosigned] Convert functions for webhookCIP from v1alpha1 by @DennyHoang in #1736
  - Refactor policy related code, add support for vuln verify by @vaikas in #1747
  - Use bundle log ID to find verification key by @haydentherapper in #1748
  - [cosigned] The webhook name is now configurable via --webhook-name flag by @vpnachev in #1726
  - Add intermediate CA certificate pool for Fulcio by @haydentherapper in #1749
  - test: create fake TUF test root and create test SETs for verification by @asraa in #1750
  - Implement identities, fix bug in webhook validation. by @vaikas in #1759
  - Validate issuer/subject regexp in validate webhook. by @vaikas in #1761
  - chore: add warning when attaching sBOMs by @hectorj2f in #1756
  - Verify embedded SCTs by @haydentherapper in #1731
  - chore: add warning when downloading a sBOM by @hectorj2f in #1763
  - [policy-webhook] The webhooks name is now configurable via --(validating|mutating)-webhook-name flags by @vpnachev in #1757
  - Break the CIP action tests into a sh script. by @vaikas in #1767
  - tuf: add debug info if tuf update fails by @asraa in #1766
  - cosigned: add support for rsa keys by @hectorj2f in #1768
  - Cosigned validate against remote sig src by @DennyHoang in #1754
  - Add Fulcio intermediate CA certificate to intermediate pool by @haydentherapper in #1774
  - fix: more informative error by @ybelMekk in #1778
  - Run update-codegen. by @wlynch in #1789
  - Remove the dependency on v1alpha1.Identity which brings in unnecessary k8s deps. by @vaikas in #1790
  - Refactor fulcio signer to take in KeyOpts. by @wlynch in #1788
  - test: add cue unit tests by @hectorj2f in #1791
  - Attestations + policy in cip. by @vaikas in #1772
  - chore: add rego function to consume modules and evaluate them by @hectorj2f in #1787
  - Add parallelization for processing policies / authorities. by @vaikas in #1795
  - Allow passing keys via environment variables (env:// refs) by @znewman01 in #1794
  - Handle context cancelled properly + tests. by @vaikas in #1796
  - Fix a bug where an error would send duplicate results. by @vaikas in #1797
  - Revert "Refactor fulcio signer to take in KeyOpts. (#1788)" by @wlynch in #1798
  - cosigned: Unify cue data and policy before evaluating it by @hectorj2f in #1793
  - Don't fail open in VerifyBundle by @mtrmac in #1648
  - Load in intermediate cert pool from TUF by @haydentherapper in #1804
  - Support PKCS1 encoded and non-ECDSA CT log public keys by @haydentherapper in #1806</changelog>
  <changelog author="meissner@suse.com" date="1655553600">- updated to 1.9.0
  - Check failure message of policy that fails with issuer mismatch by @vaikas in #1815
  - [Cosigned] Add signature pull secrets by @DennyHoang in #1805
  - feat: add rego policy support by @hectorj2f in #1817
  - Refactor fulcio signer to take in KeyOpts (take 2) by @wlynch in #1818
  - cosigned: Test unsupported KMS providers by @imjasonh in #1820
  - chore(deps): Included dependency review by @naveensrinivasan in #1792
  - Add auth flow option to KeyOpts. by @wlynch in #1827
  - Document Staging instance usage with Keyless by @k4leung4 in #1824
  - New flag --oidc-providers-disable to disable OIDC providers by @puerco in #1832
  - Validate tlog entry when verifying signature via public key. by @wlynch in #1833
  - Add function to explicitly request a certain provider by @priyawadhwa in #1837
  - cosigned: Fix podAntiAffinity labels by @elfotografo007 in #1841
  - remove exclude from go.mod by @cpanato in #1846
  - [Cosigned] Glob matching improvement by @DennyHoang in #1842
  - sget: Enable KMS providers for sget by @imjasonh in #1852
  - Fix piv-tool generate-key command in TOKENS doc by @nealmcb in #1850
  - Add IBM Cloud Container Registry to tested registry list by @bainsy88 in #1856
  - If SBOM ref has .json suffix, assume JSON mediatype by @jdolitsky in #1859
  - Add rekor.0.pub TUF target to unit tests by @priyawadhwa in #1860
  - Normalize certificate flag names by @haydentherapper in #1868
  - Check certificate policy flags with only a certificate by @haydentherapper in #1869
  - Update go to 1.17.10 / cosign image to 1.18.0 and actions setup go by @cpanato in #1861
  - Point git commmit FUN.md to gitsign! by @wlynch in #1874
  - [cosigned] remove regex from the image pattern fields by @hectorj2f in #1873
  - go.mod: format go.mod by @zchee in #1879
  - Remove dependency on deprecated github.com/pkg/errors by @zchee in #1887
  - tree: only report artifacts that are present by @ribbybibby in #1872
  - update README with ebpf modules by @EItanya in #1888
  - Update github.com/google/go-containerregistry/pkg/authn/k8schain module to f1b065c6cb3d by @vpnachev in #1889
  - v1beta1 API for cosigned by @vaikas in #1890
  - tree: support --attachment-tag-prefix by @ribbybibby in #1900
  - [cosigned] Remove undefined apiGroups from policy clusterrole by @vpnachev in #1896
  - GHSA-66x3-6cw3-v5gj: Update go-tuf to v0.3.0 by @janisz in #1894
  - The timeout arg in golangci-lint has been moved to the generic args p… by @dlorenc in #1901
  - [cosigned] Rename cosigned references to policy-controller by @hectorj2f in #1893
  - Move deprecated dependency: google/trillian/merkle to transparency-dev by @cpanato in #1910
  - Add support for "**" in image glob matching by @imjasonh in #1914
  - Add privacy statement for PII storage by @haydentherapper in #1909
  - Do not push to public rekor. by @vaikas in #1931
  - fix: fix fetching updated targets from TUF root by @asraa in #1921
  - fix: fix #1930 for AWS KMS formats by @vaikas in #1946
  - update cross-builder image to use go1.17.11 by @cpanato in #1950
  - remove deprecation from goreleaser, go-fish is not supported anymore by @cpanato in #1952
  - add changelog for v1.9.0 by @cpanato in #1955
  - add parallelism for goreleaser by @cpanato in #1957</changelog>
  <changelog author="meissner@suse.com" date="1658923200">- updated to 1.10.0
  - replace gcr.io/distroless/ to use ghcr.io/distroless/ by @cpanato in #1961
  - Separate RegExp matching of issuer/subject from strict by @vaikas in #1956
  - tuf: improve TUF client concurrency and caching by @asraa in #1953
  - Add Cloudsmith Container Registry to tested registry list by @ciaracarey in #1966
  - feat(fulcioroots): singleton error pattern by @developer-guy in #1965
  - Drop tuf client dependency on GCS client library by @imjasonh in #1967
  - Add spdxjson predicate type for attestations by @jdolitsky in #1974
  - Remove policy-controller now that it lives in sigstore/policy-controller by @vaikas in #1976
  - cleanup: unexport kubernetes.Client method by @imjasonh in #1973
  - cleanup ci job and remove policy-controller references by @cpanato in #1981
  - fix/update post build job by @cpanato in #1983
  - docs: updated Azure kms commands. by @JBrejnholt in #1972
  - Add cyclonedx predicate type for attestations by @jdolitsky in #1977
  - Route deprecated -version to version subcommand by @puerco in #1854
  - docs(readme): add installation steps for container image for cosign binary by @developer-guy in #1986
  - Add --platform flag to cosign sbom download by @puerco in #1975
  - Use pkg/fulcioroots and pkg/tuf from sigstore/sigstore by @imjasonh in #1866
  - Add --oidc-provider flag to specify which provider to use for ambient credentials by @priyawadhwa in #1998
  - encrypt values to create the github action secret by @cpanato in #1990
  - sign-blob: bundle should work independently and respect --output-certificate and --output-signature by @Dentrax in #2016
  - Attempt to clean up pkg/cosign by @imjasonh in #2018
  - public-key: fix command description by @Dentrax in #2024
  - [NFC] specs: fix list formatting on SIGNATURE_SPEC by @woodruffw in #2030
  - feat: cert-extensions verify by @developer-guy in #1626
  - Fix #1378 create new attestation signature in replace mode if not existent by @Syquel in #2014
  - Use cosign.ConfirmPrompt more consistently by @imjasonh in #2039
  - chore: add a note about SIGSTORE_REKOR_PUBLIC_KEY var by @hectorj2f in #2040
  - Fix OIDC test by @cpanato in #2050
  - Add env subcommand. by @wlynch in #2051
  - remove tests with 1.21 k8s cluster because it is deprecated and add v1.23/24 by @cpanato in #2055
  - update ct/otel and etcd by @cpanato in #2054
  - chore(deps): CycloneDX PredicateType changed to use in-toto-golang by @masahiro331 in #2067
  - Remove replace directives in go.mod. by @wlynch in #2070
  - update design doc link by @bobcallaway in #2077
  - Remove hack/tools.go by @imjasonh in #2080
  - fix missing quote by @cpanato in #2090
- removed cosigned and webhook</changelog>
  <changelog author="meissner@suse.com" date="1659700800">- updated to 1.10.1 (jsc#SLE-23879)
  - CVE-2022-35929: Fixed that cosign verify-attestaton --type can
    report a false positive if any attestation exists (GHSA-vjxv-45g9-9296
    (bsc#1202157)
- What else changed:
  - add flag to allow skipping upload to transparency log by @k4leung4 in #2089
  - Improve error message when no sigs/atts are found for an image by @imjasonh in #2101
  - Change Result in Vulnerability Attestation to interface{} by @knqyf263 in #2096
  - Fix field names in the vulnerability attestation by @otms61 in #2099
  - remove style jobs and cleanup makefile gofmt and goimports are running already with golangci-lint by @cpanato in #2105
  - sparkles Enable Scorecard badge by @azeemshaikh38 in #2109
  - Resolves #522 set Created date to time of execution by @Lerentis in #2108
  - Introduce a custom error type to classify errors. by @mattmoor in #2114
  - feat: attach: attestation: allow passing multiple payloads by @Dentrax in #2085
  - update cross-builder to go1.18.5 and cosign image to 1.10.0 by @cpanato in #2119
  - chore: fix documentation and warning on using untrusted rekor key by @asraa in #2124
  - Correct the type used for attest by @mattmoor in #2128</changelog>
  <changelog author="meissner@suse.com" date="1663243200">- updated to 1.12.0 (jsc#SLE-23879)
  - CVE-2022-36056: Fixed verify-blob could successfully verify an artifact when verification should have failed (bsc#1203430)
  - Support non-ECDSA key types for verify-blob by @haydentherapper in #2203
  - feat: integrate Alibaba Cloud Container Registry cred helper by @mozillazg in #2008
  - remove double quotes, looks like it is passing as a single string to cosign and not as an array by @cpanato in #2205
  - Clarify error when KMS provider fails to load by @znewman01 in #2220
  - feat: set annotations to generate additional bash completion information by @dirien in #2221
  - Add deprecation warning for sget CLI and packages by @imjasonh in #2019
  - upgrade setup-ko to point to new repo by @imjasonh in #2225
  - Temp fix for e2e test by @haydentherapper in #2247
  - update kind to use release v0.15.0 and some version comments by @cpanato in #2246
  - Fix e2e test failure, add test for local bundle without rekor bundle by @haydentherapper in #2248
  - fix: fix secret test, non-experimental bundle should pass by @asraa in #2249
- updated to 1.11.1
  - add stale workflow using the workflow template by @cpanato in #2175
  - Update Scorecard action to v2:alpha by @azeemshaikh38 in #2177
  - add release cadence section in the readme by @cpanato in #2179
  - feat: Rework fig autocomplete command by @dirien in #2187
  - fix: fix typo that caused attestation verification failure by @asraa in #2199
- updated to 1.11.0
  - Verify the certificate chain against the Fulcio root trust by default by @wata727 in #2139
  - Add notes to clarify registry use. by @bendory in #2145
  - Use TUF from scaffolding for validating cosign. by @vaikas in #2146
  - docs: clarify wording in spec about usage of certificate chain by @asraa in #2152
  - fix: fix blob verification output with sharded rekor tlogs by @asraa in #2157
  - fix: adds envelope hash to in-toto entries in tlog entry creation by @nkreiger in #2118
  - fix handling of verify-attestation types for URIs by @otms61 in #2159
  - fix oidc post-merge job by @cpanato in #2164
  - Remove third_party by @imjasonh in #2166
  - use updated device flow logic with PKCE by @bobcallaway in #2163
  - fix: rekor get tlog entry with uuid by @asraa in #2058
  - update e2e job to run only when push to main by @cpanato in #2169
  - fix: add env cmd to root by @developer-guy in #2171
  - fix panic when os.Stat returns an error besides ErrNotExists by @dsa0x in #2162</changelog>
  <changelog author="dmueller@suse.com" date="1664280000">- update to 1.12.1:
  * fix: Pulls Fulcio root and intermediate when --certificate-chain is not
    passed into verify-blob command. The v1.12.0 release introduced a
    regression: when COSIGN_EXPERIMENTAL was not set, cosign verify-blob would
    check a --certificate (without a --certificate-chain provided) against the
    operating system root CA bundle. In this release, Cosign checks the
    certificate against Fulcio's CA root instead (restoring the earlier
    behavior).
  * fix: fix cert chain validation for verify-blob in non-experimental mode
  * fix: add COSIGN_EXPERIMENTAL=1 for verify-bloba
  * Fix BYO-root with intermediate to fetch intermediates from annotation
  * fix: fixing breaking changes in rekor v1.12.0 upgrade
- use go-modules service to generate the vendor.tar and use zstd</changelog>
  <changelog author="meissner@suse.com" date="1666094400">- update to 1.13.1:
  * verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)
  * Nits for #2337 (#2342)
  * Add verify-blob-attestation command and tests (#2337)
  * Update warning when users sign images by tag. (#2313)
  * Remove experimental flags from attest-blob and refactor (#2338)
  * Add --output-attestation flag to attest-blob and remove experimental signing (#2332)
  * Add attest-blob command (#2286)
  * Add '--cert-identity' flag to support subject alternate names for ver… (#2278)
  * Update Dockerfile section of README (#2323)
  * Fix option description: "sign" --&gt; "verify" (#2306)
- update to 1.13.0:
  * feat: use stdin as an input for predicate by @developer-guy in https://github.com/sigstore/cosign/pull/2269
  * feat: improve the verification message by @developer-guy in https://github.com/sigstore/cosign/pull/2268
  * use scaffolding 0.4.8 for tests. by @vaikas in https://github.com/sigstore/cosign/pull/2280
  * fix pivtool generate key touch policy by @cpanato in https://github.com/sigstore/cosign/pull/2282
  * Check error on chain verification failure by @haydentherapper in https://github.com/sigstore/cosign/pull/2284
  * Fix: Remove an extra registry request from verification path. by @mattmoor in https://github.com/sigstore/cosign/pull/2285
  * Fix: Create a static copy of signatures as part of verification. by @mattmoor in https://github.com/sigstore/cosign/pull/2287
  * Data race in FetchSignaturesForReference by @RTann in https://github.com/sigstore/cosign/pull/2283
  * Add support for Fulcio username identity in SAN by @haydentherapper in https://github.com/sigstore/cosign/pull/2291
  * fix: make tlog entry lookups for online verification shard-aware by @asraa in https://github.com/sigstore/cosign/pull/2297
  * Better help text to sign and verify SBOM by @ChristianCiach in https://github.com/sigstore/cosign/pull/2308
  * Adding warning to pin to digest by @ChaosInTheCRD in https://github.com/sigstore/cosign/pull/2311
  * Add annotations for upload blob. by @cldmnky in https://github.com/sigstore/cosign/pull/2188
  * replace deprecate package by @cpanato in https://github.com/sigstore/cosign/pull/2314
  * update release images to use go1.19.2 and cosign v1.12.1 by @cpanato in https://github.com/sigstore/cosign/pull/2315</changelog>
  <changelog author="meissner@suse.com" date="1677499200">- update to 2.0.0 (jsc#SLE-23879)
  Breaking Changes:
  * insecure-skip-tlog-verify: rename and adapt the cert expiration check (#2620)
  * Deprecate --certificate-email flag. Make --certificate-identity and -… (#2411)
  Enhancements:
  * Change go module name to github.com/sigstore/cosign/v2 for Cosign 2.0 (#2544)
  * Allow users to pass in a path for the --identity-token flag (#2538)
  * Breaking change: Respect tlog-upload=false, default to true (#2505)
  * Support outputing a certificate without uploading to the tlog (#2506)
  * Attestation/Blob signing and verification using a RFC3161 time-stamping server (#2464)
  * respect tlog-upload flag with TSA (#2474)
  * Better feedback if specifying incompatible argument on cosign sign --attachment (#2449)
  * Support TSA and Rekor verifications (#2463)
  * add support for tsa signing and verification of images (#2460)
  * cosign policy sign: remove experimental flag and make keyless signing default (#2459)
  * Remove experimental mode from cosign attest and verify-attestation (#2458)
  * Remove experimental mode from sign-blob and verify-blob (#2457)
  * Add --offline flag to force offline verification (#2427)
  * Air gap support (#2299)
  * Breaking change: Change SCT verification behavior to default to enforcement (#2400)
  * Breaking change: remove --force flag from sign and attest and rely on --yes flag to skip confirmation (#2399)
  * Breaking change: replace --no-tlog-upload flag with --tlog-upload flag (#2397)
  * Remove experimental flag from cosign sign and cosign verify (#2387)
  * verify: remove SIGSTORE_TRUST_REKOR_API_PUBLIC_KEY test env var for using a key from rekor's API (#2362)
  * Add warning to use digest instead of tags to other cosign commands (#2650)
  * Fix up UI messages (#2629)
  * Remove hardcoded Fulcio from output (#2621)
  * Fix missing privacy statement, print in multiple locations (#2622)
  * feat: allows custom key names for import-key-pair (#2587)
  * feat: support keyless verification for verify-blob-attestation (#2525)
  * attest-blob: add functionality for keyless signing (#2515)
  * Rego: add support for custom error/warning messages when evaluating rego rules (#2577)
  * feat: add debug information to cert validation error (#2579)
  * Support non-Sigstore TSA requests (#2708)
  * Add COSIGN_OCI_EXPERIMENTAL, push .sig/.sbom using OCI 1.1+ digest tag (#2684)
  * Output certificate in bundle when entry is not uploaded to Rekor (#2715)
  * attach signature and attach sbom must use STDIN to upload raw string (#2637)
  * add generate-key-pair GitHub Enterprise server support (#2676)
  * add in format string for warning (#2699)
  * Support for fetching Fulcio certs with self-managed key (#2532)
  * 2476 predicate type download (#2484)
  Bug Fixes:
  * Fix the file existence check. (#2552)
  * Fix timestamp verification, add verify-blob tests (#2527)
  * Fix(verify): Consolidate certificate expiry logic (#2504)
  * Updates to Timestamp signing and verification (#2499)
  * Fix: removes attestation payload from attest-blob's output &amp; no base64 encoding (#2498)
  * Fix path for e2e-tests badge (#2490)
  * Fix spdx json media type (#2479)
  * Fix sct verificaction (#2426)
  * Fix: panic with unsigned local image (#2656)
  * Make sure a cert passed in via --cert matches the bundle cert (#2652)
  * Fix: fix github oidc post submit test (#2594)
  * Fix: add enhanced error messages for failing verification with TUF targets (#2589)
  * Fix: Add missing schemes to cosign predicate types. (#2717)
  * Fix: Drop the CosignPredicate wrapper around SBOM attestations. (#2718)
  * Fix prompts with Windows line endings (#2674)</changelog>
  <changelog author="dmueller@suse.com" date="1680609600">- fix buildtags
- build against a maintained golang version (upstream uses go1.20)</changelog>
  <changelog author="meissner@suse.com" date="1681732800">- update to 2.0.1 (jsc#SLE-23879)
  Enhancements
  - Add environment variable token provider (#2864)
  - Remove cosign policy command (#2846)
  - Allow customising 'go' executable with GOEXE var (#2841)
  - Consistent tlog warnings during verification (#2840)
  - Add riscv64 arch (#2821)
  - Default generated PEM labels to SIGSTORE (#2735)
  - Update privacy statement and confirmation (#2797)
  - Add exit codes for verify errors (#2766)
  - Add Buildkite provider (#2779)
  - verify-blob-attestation: Loosen arg requirements if --check-claims=false (#2746)
  Bug Fixes
  - PKCS11 sessions are now opened read only (#2853)
  - Makefile: date format of log should not show signatures (#2835)
  - Add missing flags to cosign verify dockerfile/manifest (#2830)
  - Add a warning to remember how to configure a custom Gitlab host (#2816)
  - Remove tag warning message from save/copy commands (#2799)
  - Mark keyless pem files with b64 (#2671)</changelog>
</package>
<package pkgid="c60d6476740c6482c27fde08b65fd765124251320de9a1c95d16f55260b5e74a" name="cpp12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="94478ea9c0e79550d707a49080daa9fbd5f0db1cc4d7eec5a5760050729ecaa2" name="cpp12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1057891f8b58236191ede070b0ad82b8641463919ff15dc25961587af8c50ad6" name="cpp12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fb232300907277085c475d5c83f99470fe3df198a87d9a0f5c59fe2fc114a7bb" name="cpp12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2e88743289e1a80a88585012f641ac765cce2f5166f148f8619ee62d9116576d" name="cpupower" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="3a0e15ddccf7c0581831f155ea7d36cfea064d37392c403d348a2e9a8f43147b" name="cpupower" arch="ppc64le">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="336948dbfeec34829b85e75ed1ea4f57c3edb05e7665aeeed7a17ff12deeea5a" name="cpupower" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="9d4b50362d8f506974571a254d673898850a49cecab965e8f77f53e3ae7a6217" name="cpupower" arch="src">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="86a9e9aba4bcc45b74f383d1c7d45562dd8c86a8f5b47c3ed4b8c5c78a29060d" name="cpupower" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="1e45d80060761fb885bc0fbaed53c3765f023201b89455d4fcb14a0de4b04257" name="cpupower-bench" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="ebf82dc776cf6b9fc083fc5aff9e68ffc5c1a25f58d617d0870968dcd5baf4c1" name="cpupower-bench" arch="ppc64le">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="48a3d67e19c088bc6c297ca9338788304dacc5c0d6de62cea62f85be62a5512f" name="cpupower-bench" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="3df3a94dc54769310db74ac821e32653c503a0ca1e89c8f65167cfe427ed098b" name="cpupower-bench" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="6c2fe33ed200d7aa4683d1c61ab585d5efe2c2bbab168cf7a93b98a563016abe" name="cpupower-devel" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="7d554abf0393d13ce0bac621ddf7897e4924955d1ca2ea4083a6a741cc932aeb" name="cpupower-devel" arch="ppc64le">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="ee4c2704ecd486ac483e5e80762e1279f62ee724d4acb94b21f029109fc2e86f" name="cpupower-devel" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="86e48a9821abd0cd800b211dcfd1f0d0f0891467ead45cfd14c5eaf2b5644491" name="cpupower-devel" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="3b5c7c78584e84ba835cbfc04dfc2f054f161b5221fa253650d6854c8182b3af" name="cross-aarch64-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dad47d104c5d0221eecd1e9e30ac0cf5fb19416005fe2966be97df16cbb65941" name="cross-aarch64-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f6eec5f75e6d3f9ebd6d4c376efa2bfc01d4f67eae2cbe50af8fc5f793e11b69" name="cross-aarch64-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="384dbeaf50eb712d71a828c3697e229fdb8dac897588f55390b5dccfbd6fdc45" name="cross-aarch64-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="17e1fd130467c45d1181b61dfd04999660032e4c3d0ddcc26b6401cf956722e8" name="cross-arm-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c642b876c3884221210c19bb6ae11f9d09114e271fa4069b86f55c0d777150c9" name="cross-arm-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="251da6d1b3f0d6ddc63f3b1c54b36f00aaff17622f5a17afd8ea815db12ff596" name="cross-arm-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a358724ef4c80599d67c035f986e3a1077e3036d9c3188271ee420df0068d35d" name="cross-arm-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a0880295f5c2a220e7b14610b4f96cc0577e8454ace512b6b7caaa133a2a3196" name="cross-arm-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cbc311e32026cfd43546e75cd059e864920216fbcabfec83faf8fb1b169d531f" name="cross-arm-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a3686c4afb149de985e056c319172c441e132fa54fd780eeb5c74e303aa50d8a" name="cross-arm-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="17b8a017f623d599396b6d7bde3f93750f77cbcad5f8d4aaa3be9414110ab713" name="cross-arm-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e80cde23388978938fa624e0cad127b310afd24a7eb9ec8fcb060c01196676f5" name="cross-arm-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="13638e0ecfc8a36df9576e885749acd2361df2ec5037f5df37ece7ee8aea09f7" name="cross-arm-none-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d86fd50ca6aaa7f84b5f9215a63b854081e4a5a0c162d25e3d6d35476130d873" name="cross-arm-none-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="057c1bf4f5ba6e8904757f3fb568670e46d7b2fdbbc7e1ac1b5dac92296a6410" name="cross-arm-none-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="99e91aca0505d810bfb7c34e78b4c5a14128e7fc8cb3e4b499223e11b95b51ad" name="cross-arm-none-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3d6f0927cb7f4a7dea38d41079276ed318b4a2ac5b04ff704edf77f61f838a31" name="cross-arm-none-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7b22e8d4d0314ea32043851abbbc388194a98f60f30935238fd39c3568c89e9f" name="cross-avr-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e4e7179e25fc25ded7e243e34a83ab6c9e1cc645c1b849005331e2b5657a1aad" name="cross-avr-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="46774e2f960643c9fd8c5f84f8786b63d6558ae2867a2057d9dd2d7bca4eb2e6" name="cross-avr-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fd2ebdceb9b2868ddd27fe93a61468dd13b781b75ce86b02d4fceb501c68840b" name="cross-avr-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3f446dd68a587e7237330cf7425ee53519eae0a2b9c55f0f75a1a6c8fb282829" name="cross-avr-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a15a6762335c067e34a900ce83014e90c74da5207bcadd92d180283b7f526dde" name="cross-epiphany-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c60d508fd54e954a5ea6e1d5624f822f6faa8affc228f3f594a9f677cd058509" name="cross-epiphany-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="847ed1c4d697e3683b51a4af32123b097cdb72678012a80cc132602c3f7b4084" name="cross-epiphany-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0d5e2b03b5aa21ba60b5326d5ea5d136f393dbbfc5c0720afc4dcc542f9cd693" name="cross-epiphany-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b3d20bec8821810039c6d61d9b00f531a1ed03905375ad84147bb985d1fe8519" name="cross-epiphany-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c3b0cd098ceb02c0f4de1f5107ce3a10a5b92f48ca490328003f08ee630deb8a" name="cross-hppa-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="50bf2df0f58c8ea7e7d3564d92079535f6e31cecc48f3ca8aaeae9384b96a845" name="cross-hppa-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="50d20b947ccc2b605d92bdcddd92769907866afe1a0c427d23285864080a292b" name="cross-hppa-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1671c4b7b29115acd39dbac89ae139cda8297dee59ed15903de12b6374607449" name="cross-hppa-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e53486c89abc7a9059f95a1ad34e708fbbfe2899faa356a30903a78244e698fe" name="cross-hppa-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b25e6d2bb89c08abb8c4ac6a0e5dd9da72465839b9db5117a02c85f14fb7b5ff" name="cross-hppa-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e900831a4ac64c0d676755b0ec7508e6e0ae098b058a691cc591d4aeedaf1f10" name="cross-hppa-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9b06b09ded6b5d9f123724086dfaf32510da63592001ce845424f31d0e71b2f2" name="cross-hppa-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ec669f8da518b745c2de5ddbf568819d446d9ed5265eaa739397b62ab4619e5c" name="cross-hppa-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e4de0a969adfa51963e137710843780d5e3e8b677a85b034a5e7b7f618941c9f" name="cross-hppa-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7f6094f21ee9aac953744acbe8db44a40b08737664ec3ea3e979bf5037179f24" name="cross-hppa-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8435878c68aaa864bd5534e86109acb0e80e7575821ce3851de835265661269f" name="cross-hppa-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f6fd1ce83d011307af4f2f3db840aa617bdce1075947896d66632e1eb739f7a9" name="cross-hppa-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5d8a74539672dfd29bf05a3dd052194422cf39d87a8c1c521742bb7a0e09c9fa" name="cross-hppa-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="87684da675d2eab19c7157499d780ac87aeb2fabd36799a18b32598b40e29990" name="cross-m68k-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="164999c666fead19267c804cafeed56435104c99d06a0e7478578e2f15f59a34" name="cross-m68k-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="30755206cfb26ee49cf199b828cb176cb822bdc5e95e97a161d1119a27116e6c" name="cross-m68k-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f35ae6fa1a2e899a1c430879652ee2876bdb2191cbe0c28ac8ffbf065d992ed8" name="cross-m68k-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="864153008e435c042c8e7027bf2dd7255b3ffe9961a9ebe186859cf58ec4f160" name="cross-m68k-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1290224f1577c59713706d7777d8856b13b4cb4327af4163168da5033d827370" name="cross-m68k-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4175007a767028f3d069b428fe8285b2d412c9717b473029de87a65f53344e71" name="cross-m68k-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="80eff8711220dddae3584c9c6bc4d8e6b2827720110f40ca4d37f3b83f15de38" name="cross-m68k-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e7eaf7a949d1d477fccf91c8ab68974af6c06a937bb66ea419a923c02c0057ab" name="cross-m68k-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="64273a9e44e716517bfbd3c76ced3f0e31293ffd0fdb0781395ee5ecc1fa7b9f" name="cross-mips-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="412b1347cbcaf47883951b9df042ca8671908bfd95aa9f274cca30253b3fbdbe" name="cross-mips-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7d0b2df64b42d29eda364711231569014dd59da82674206cc200669b16434567" name="cross-mips-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="23a3400d8324f1c7ecc0ad741db49fd13cb6718bfb45c62ffb18acdc2d6dbb97" name="cross-mips-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d8cb3ba3c30326fb51b4a8366b1bbbf4fff3632e20290c51239c4006aecf4a0a" name="cross-mips-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ae003cb5feaac135b08ec34fdfea315205a1a0db790872ed1aa4a3d2abc6213a" name="cross-mips-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0023fb0058511c65a4e00ff67fce3d9e9a85f91ce6ef86e91397f7ccecd86896" name="cross-mips-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2b62571ab8d57806bad09a6d888953d1546af22fda8d3e480fdec055aafad9d2" name="cross-mips-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ae6ee77e08dc5376adece2037e992a4d53db67154b0912263a4035f51cb499d9" name="cross-mips-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fa14165dfe0a0f85dd8b768e6aecdd1c0cd2619e59b5e7dc439aa4850bf0a72a" name="cross-nvptx-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f15b52a0bdbf2ee376aa72d4262d18675c81850bf1645ca080c3b0f47c9818be" name="cross-nvptx-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b234bd6f763ab32995a8e4c4d6cb27c25cd9dfde1520177742d7bea66150f9cb" name="cross-nvptx-newlib12-devel" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f5bb5744a676f35fca1334e65f38c64a2aba049656151bb1bd83564809cb1d5f" name="cross-ppc64-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="45e2b30ed0ace682f9f84bf1b6f903676d6875305d592d24a1d56d6fe2ac901b" name="cross-ppc64-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="69e8ee8fb1e853320835156872b68c16025200676dc3d87c66a8e01f00ccffa9" name="cross-ppc64-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="20c15a38660887fecfad7a97261c0d15ed0e6c7ea9c8b80cf5ea1f967ac0aa0e" name="cross-ppc64-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8ba121078adba2a19957d3e89856edd3ccb695a280c9078f97b7f706af17db4a" name="cross-ppc64-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5fcf90a1c2ecd576f752fa66011b6e85e6085afc657a335c0a68c2940648fa8b" name="cross-ppc64-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f0c89b75397f69e1a94da19e8f392e4ecd9427f79276157123a2910891a25380" name="cross-ppc64-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4b1b05777eb31f9c29313dc7a78c7389fbb480c1836087599a0b9cfc354c4454" name="cross-ppc64-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b74f25890050a1694a158b1b537031bbd35fed6d35880e74354a87556f3c27be" name="cross-ppc64-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e1efa94f7938ac456136db1e03ee094b3752df912a7a083b5292e1a0fa449ce6" name="cross-ppc64le-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="934e22b069c77f7604d16d0044b413b1173b7e97a32c9252b7233e79dba5d80d" name="cross-ppc64le-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dd5d7384bc3e7e21a1c3b79c9a99dd5aefb3b54481ba4ef10d84640594b8d824" name="cross-ppc64le-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="55db0cc82c87e747f0d8edc837d443b73475ff7882f16966667d2a631531156b" name="cross-ppc64le-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ab6bc34b6bd23317f258ffd32d807f042957688f2f6867cbd6a74c3f4d23ec1c" name="cross-ppc64le-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e2508094e2ccd92d6d51c40af1305b9a12c63f8ea54342783349dc6aedcde7d9" name="cross-ppc64le-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="645e2ce02c6cf0491410d2adf04a65137b4242ce9d72f632669a7234bbe60b83" name="cross-ppc64le-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a8e2274c4fdd8b6cba866a86639ac0a15d7125fd3d8340d70122e56e495004d8" name="cross-riscv64-elf-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1897eca7f3be406473b7738eb6675448bb6b322dd04c2f7009c269c9c6c75ed3" name="cross-riscv64-elf-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="74f1615bb020ab9936882c19afb08e489765127bb0bd6e43502b0062b9f99661" name="cross-riscv64-elf-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="89b10b58efbe82db6e12c7a3bad975ff1fa09b69f6565eacce0829e8fdf9be12" name="cross-riscv64-elf-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="171edf82184b5e5db1be9facb22eef3f0a52a0f6ce2acbb708e51e960d11d820" name="cross-riscv64-elf-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5ffb7af8f30c449e07d5090e1481c33a6d281e186466f8dd1b46bf6bfdbc17c3" name="cross-riscv64-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6985ab3ad15817b8212445809f701bf4b7336a7a28d2991e316f78fa47cb69d7" name="cross-riscv64-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="de0e606312c0ab2dffc2a557ee81cb777bb70997ccc2a5b9a71f4c8501faa8c3" name="cross-riscv64-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b65aecc12469489d461e31cd4e504b50637d50db251908681e544eb2759f4893" name="cross-riscv64-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="40847375547cf84471ebd4228847f454b611a458df0b4ac21c65d8cb3b2e9428" name="cross-riscv64-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1234f85ad1dadfe626d8980021eaf81f6655979b8aaa04a679e5d87d52b84e5f" name="cross-rx-gcc12-bootstrap" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3ad7e1e36993e5aedf2bcc92d663df4ea9b4f895d52e652e06aea7937d0856f3" name="cross-rx-gcc12-bootstrap" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cbd2c4e9c8963290a6e6f2fe624f9c031928a02abd607c89689f8f20ebdc28a0" name="cross-rx-gcc12-bootstrap" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7f384447fdbdd74c3dcca94d755b23f47d66f08282ccfb91c642dcb7749223a1" name="cross-rx-gcc12-bootstrap" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="13dbde5f43fa7d0a0fb5c31ad6b8dd1727cc61dbc522e075bccb6d7c86ff180c" name="cross-rx-gcc12-bootstrap" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2eb77234e4be36864f103811ffcb16ca9cb3efaa607f7d542d9fcab093b00310" name="cross-s390x-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e884fd2958c4ff3b08f54ba04fe1eaefb8eac47be97b2834c6a03d738e9d3e7d" name="cross-s390x-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8b3bc3a3937b8d72c54b91d43bbcd61e83f33e843be9a498855ea7b072e70d9b" name="cross-s390x-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="82aceabc870e3ff9ef2b5afb85af5073ba8fbb98b0e3ff78491c6ac2f6c08d9b" name="cross-s390x-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e37a24b27467eaf86010f68d0a124d4b1468a03a46fae03e56d0e963c9ce42b7" name="cross-s390x-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="344069a967be03946c5cf78364219734868bbd9400a1dfb7da4fb60ec4e3701f" name="cross-s390x-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b9d2bd0671f7a1b2c338b5a2f286609e304538483acd3876a1b491c7427cad94" name="cross-s390x-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b8885a36dbc1125f0b51b7a4bc402248a54c0bc41d702e5803026cdad3585358" name="cross-sparc-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d3a1688b9cfee8cdb277f2e7ac657c96cf0a41950668434005b153890372e003" name="cross-sparc-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1870c8e13f1174475e746d57d9b2ac1baec4d37ae572641a023e3bedfc78e015" name="cross-sparc-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="74d0c07ef5ac4db2cb2702921fd14c3899291a117ca313fd7351c28ceb51b3bb" name="cross-sparc-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7a103adba1aa3f4f869a8898033d245bbd959de0c88db929a9a387ef1be6bdf7" name="cross-sparc-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="591d1db4e824c899f0b9e8cb5c809d707a7ad8f4d1120905d14380df06c673df" name="cross-sparc64-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f2c401d450b79283818bc0008bf9634b563492eeefddc8b43ab46a7a9c0b5972" name="cross-sparc64-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="16b26ad67f70f6586952cae0b3c6eb472984ab6dd9053947a912f7c6bda76f12" name="cross-sparc64-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fd6b3ff3d05586c5098c501e80cf3734e44c798ab9c9d604eedfb0bf5a7be9d3" name="cross-sparc64-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d43dbd23416b2f66c05176f5ca2d6693abd3d37bf1a9d959648bef1bda62e70e" name="cross-sparc64-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4a1808b0c92b73613f3fc9fe9e8a7d6c6da5e43e322b95c63f5e3795cf5b1a6e" name="cross-sparc64-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="22c071f92170770c27835a24b46142ad231c9bcf51291ece1c7b109f8fd458a3" name="cross-sparc64-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="af1deefa09f45a461a86d517999573c5be9bdd928804fa2a847be9887d09bcd1" name="cross-sparc64-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6d3d015df7e596c4fda2acd3b8463b435fbc02ac2c5eaee0500c006aaca64966" name="cross-sparc64-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="78b441bee00482474d1222fc76ba67d48f3b54321670021ce7fd715c9f105d9e" name="cross-sparcv9-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2eff1351730b008cbcea99c1a43f6f63938ae4849e3d5e7838c452d3277660ff" name="cross-sparcv9-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e1c7f00bd1d7015c81895ddd1e0598cd5825e695f316aa12925cfb096f3eb282" name="cross-sparcv9-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7e9e4c3257317132f215c1734a93f1d69809144f9fb082cc25e0eb96cdd72e04" name="cross-sparcv9-gcc12-icecream-backend" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e15be1c02d1b4cd0b6bd81ae7d7b093df519a87e8e3a4aacfe39fcb912d255c5" name="cross-x86_64-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6d381babf892677f0f01ef0ad4ae3d36550a5d5b09111e9393ddc8f4828bb24d" name="cross-x86_64-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="bfdb0459209e5c04ca3eb0b5f4c4a30f6edb8cdd8d5eec38c31bac272eb12aad" name="cross-x86_64-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="95ad5ba91f38cbf44518f24206460042e9f031e45771735b09399702809f98f9" name="cross-x86_64-gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8976beeed4e12991c1a1fc345dc67ac993f7c5e9ca618675aff9e3943637e8ca" name="cross-x86_64-gcc12-icecream-backend" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="48e131bdfbca7d4dbb158dc81024044e7655638160189d55211245ff1cf53c7f" name="cross-x86_64-gcc12-icecream-backend" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3442616e121cacef4e41997127869fc4043c5e364f645f463ac8728650e704c5" name="cross-x86_64-gcc12-icecream-backend" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="eb4dee617c1fa8a1a143786764afb3ecc1d6cc93eab9be2c78f6d25eeed2039c" name="cups" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="ac106bd69a98423a512051bcb2e5a038642ee99a4145fac0b3e8883d9e4ec292" name="cups" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="9b2e448faedf76d4ba65cc47a8bcbf9ce096e166e141d04f77d710892de5eafa" name="cups" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="f3c76c70c1fc36fab856e51e75424391a3eea0cc6b2cd6442ab016c22af2663c" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="53cb2dee2284d5023831ef131764982812ca48106fab1ef941b4a485f5e395c9" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="a8375c0c9f7a21320b12bec4e4e1c7eb4bbba723687699b682797cb93cccc8aa" name="cups" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="02c02a245539a10c280f528079546e0a8d64ec8d5404268a5d33122119e70f58" name="cups" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0dcf78b9b46af921aa4a6216cbadecee491e7563161d0cf8db334d18e8f0629c" name="cups" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="f5eb3c9b5bd854918010ac04be2fadd97ef7e08f70cb677b5a8f754d8d96f073" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="088a00f86d5f7e821cf5ba57bbc1699c110f205e6f659a4bb919da3b2f10c713" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="1233ea062e160a907a3c00a109dd5694c57b3ad6d3a5163449e931acea369f54" name="cups-client" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="5b9b22010da7993b1eeb9c9e56da39c7c6e5ac2a4b6bb9096426428699ffe1b6" name="cups-client" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="521737c71b5e5b903ab55c877a5e961d260774e63bbaf457f0bd393a0d0d0bc5" name="cups-client" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="84ff912a3d2e3d6da8ca0cf3bd0d1be3f152f62ec48c28204bc0d41322d9e6e0" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="6475da3915f2aa463c99a4652b3cba4abbc8f8cb531e832fcd5caef549edfc66" name="cups-client" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0b108ffa88f8022661098c4af09bf967d7184a7e35175fb255b8dc1c668c2163" name="cups-client" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="324623452204aed538c3860a9ef8dbe1d2dca7936490e3353f53d88d3477ced3" name="cups-client" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0f4af683acfd5718cac756c627a91970ce680a15d2b34df12ea181e9f8889dbd" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="69ac06682a00fc337756db82098c42650398dbd95b9aaf7ddbad7799e630bfd1" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="7464330e5bbf1202d38b967a2d4164d18951416b7754a7269e92ff83a25b7f4f" name="cups-config" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="d9ed50be9bc669fda86875b763ad24c8b74d24064aab9883691855165c317efc" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="32026d0981feab396d4a236db6027d4fc4c83b74197d2e3368a007b7e71218dc" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="485f14f7ebd052e1d9c59fc7c245b0c5e080a99e0ca74f5403bf0992054522a4" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="f975ac8bb98ffeb6f1eebb55f3ff43ad95b69afd1a113817c1285b5a9751bacb" name="cups-config" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="68d5fd6c2812972f8fffee22e8cbff0c9e711935943a9cd736fae54ad60673cf" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="2ba6f6eab833ac17f012a6b8596f03ceb222dc9967114c96c612d1cd7fe2a04a" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="a4c1d64ba8890e0880973eb67a8707ebfb4a05a5f98c60d339057521fec6bf29" name="cups-ddk" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="47caace35f5d90a41097a5211cbe2270f67da63571ccfc62135f0c3494ef63d8" name="cups-ddk" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="7d4b782452cd3433c901edacdc8e74eded9151b20cd8c3e7379841f7967477fa" name="cups-ddk" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3ae136d5e9dba3fd1d3f8c518012e4a76f70e2dd43026c1682c5b1c488ff2c1e" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="17deb2b7e9ba4529c9d5519fb46b313e0d252e11509d05fb52fe337adfa07aa7" name="cups-ddk" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="1d593c9c9d7a43a6aedb5d4dc9a0c95926034c9efe12f8eb5187ef147b97186e" name="cups-ddk" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="ca1afeb8efc267e1020ee6d7c12d63deb9bc4a64d16a7eeac8718cf01f0927c4" name="cups-ddk" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="5d869d9ce2edc934ceab017131045952f5bc0e2fdb1a070704acfe6a0ac1c500" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="f92f70c92b872e8bd13b1fccad06a8a63ab845fb56d3d931e5f4b78073e4e095" name="cups-devel" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="c785d6d0f2383930efc9f39166c0bd7100a6b360d47c33ac03ff1708b952d6a6" name="cups-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="24987b6e06ab5c72b1a3a6d4680b5ddff6def9083b4c2b9a0278f9ed4a9e3a47" name="cups-devel" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3d3e6712b39bd3545facd46a356a73e89a09ed3a644e131c2a120a1363d4c1fb" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="36c087a25bd3c72415b64a2f41fa99cccf16cc242730529b4909710ded73d64f" name="cups-devel" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="10be98ebe1ceac2795e6b3ec07a1efac1a5b24ba9b1d133f2581b9af159643f9" name="cups-devel" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="c2d28fd1e8f98418fe159a0de1996f615bdf069b56f63b6a0118e29a0bc18b5e" name="cups-devel" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="c2fe0995102fe8173b2aa410065dd67ef22b874396f34eff5aea871d6c3f6af4" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="ae09d6a4c7d6c2623612bc5e64d0eed254a6235dc1dfb322443369af414c69c6" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="0215050f20ce00c2dd2a98cb272ca3337bf04a7e3776e0b22a90d97263a55811" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="9e9cf3056d28ac5495f1cb882badcbefe3fabb63f2a5473b345b2a724544cfff" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="f8a9fbb8e478a7939e6fd123eab9d3ac3be94b5d96d6a9f05053c614cb759c19" name="curl" arch="ppc64le">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="ce79e4f5d90cffa80512a461c85c389284797b6f97ea0ceda0a6e453a7d7f346" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="7898863fe05570841ec19ee3e1b3335e975fe6a312f6f1418e0d221b4a00af13" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="3a916d994cb241620c50f2c260fd977371ef8bb4467e0486d5f029debf705b2a" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="df42ef35a85736d508012a50c1c2ab7006dd00856288a4ff13ca8fe110ead184" name="dav1d" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="79dfb72cd0a5119e9fc792a05ef2b30d2d416890b88502a2cd93f78acd1dc5a5" name="dav1d" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="8bf75a9b02c78dd0f802cae1d44ff4e122051f4c6404e02751150c701a1e568a" name="dav1d" arch="s390x">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="d26c4657cd1306fd102065dbf79782eb99c5e00513be196ba3439cc71ec6e7fa" name="dav1d" arch="src">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="372169033280e97c07844587b76fe30bc7b345f56c58aa6cf0d17e68f7afb82f" name="dav1d" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="2cf91a840a1e450c22e995799277c1c058117e5bb9ca059b9aef5c7fbf917d78" name="dav1d-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="f38c69a3f4620e12904eb732aa5ecdef3c597172e39d499a22a2e73701a1a8ff" name="dav1d-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="afe5d237e83b4b406f2267568f03e578a4e76fa3e2d328b32cbd1d70573e9a89" name="dav1d-devel" arch="s390x">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="082313c9a1aba61eeca72d74d7d1128bd48d70e80f1fc5f4cae337a0b9dbd7b6" name="dav1d-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="5c9320ecb6e7966e585f31b95ab35a9ef5081d5d4f4f9397656d6b1e9f3c214f" name="distribution" arch="src">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="2d16d38bda5246f1a99f1a504a6f037da3f4c7040584eb08d1638b884911b1df" name="distribution-registry" arch="aarch64">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="a437113dcdd2f46974968da3bf4b9226db5793a775ded69d6d87eabaa8c8304e" name="distribution-registry" arch="ppc64le">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="d2bf9bed67980e7eff5d120bd4aeb77e379d32b638918a642356703d8a02facd" name="distribution-registry" arch="s390x">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="c7fe825c7e59969f83d8d4b831b25f83840688b1d41d5d8c4c21bc8f88a8495e" name="distribution-registry" arch="x86_64">
  <version epoch="0" ver="2.8.2" rel="150400.9.21.1"/>
  <changelog author="kukuk@suse.de" date="1570104000">- Use correct URL to project
- Remove fillup, we don't ship a sysconfig file
- Correct systemd requires
- Enable build on ARM</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1572436800">- Enable ppc64le</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1581076800">- Enable build on %arm (which include armv6), not only on armv7</changelog>
  <changelog author="snica@suse.com" date="1593086400">- Reworked the RPM spec to use the golang-packaging macros instead
  of the provided Makefile</changelog>
  <changelog author="snica@suse.com" date="1594123200">- Run registry as non-privileged user</changelog>
  <changelog author="jsuchome@suse.com" date="1595592000">- enabled changesgenerate option to automatically generate changes</changelog>
  <changelog author="kukuk@suse.com" date="1595937600">- Remove registry.SuSEfirewall2, SuSEfirewall2 does not exist anymore</changelog>
  <changelog author="snica@suse.com" date="1596196800">- include OSS and GCS backend drivers in the build</changelog>
  <changelog author="snica@suse.com" date="1597752000">- Add 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  to get the registry to honor the umask when creating new folders
  (https://github.com/docker/distribution/pull/3204)
- Add 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  (https://github.com/docker/distribution/pull/2879)</changelog>
  <changelog author="jsuchome@suse.com" date="1599739200">- Add 0003-Support-external-redis-sentinel-cluster.patch
  This is patch that is not officially merged in docker-distribution,
  but is being used by Harbor project when building docker-distribution
  image
- Bumped go BuildRequires to 1.13</changelog>
  <changelog author="dmueller@suse.com" date="1602504000">- add 0004-Make-ipfilteredby-not-required.patch
  Make ipfilteredby optional</changelog>
  <changelog author="dmueller@suse.com" date="1626350400">- go back to golang 1.15 to fix the build for now</changelog>
  <changelog author="rbrown@suse.com" date="1644926400">- Update to version 2.8.0:
  * Update README so the release pipeline works properly.
  * Make this releaes a beta release first.
  * [2.8] Release artifacts
  * release workflow
  * Apply suggestions from code review
  * Prepare for v2.8.0 release
  * [release/2.7] vendor: github.com/opencontainers/image-spec v1.0.2
  * manifest: validate document type before unmarshal
  * [release/2.7] vendor: github.com/golang-jwt/jwt v3.2.1
- Drop merged patchs
  * 0001-Fix-s3-driver-for-supporting-ceph-radosgw.patch
  * 0002-Relax-filesystem-driver-folder-permissions-to-0777-cont.patch
  * 0003-Support-external-redis-sentinel-cluster.patch
  * 0004-Make-ipfilteredby-not-required.patch</changelog>
  <changelog author="dcermak@suse.com" date="1651492800">- Update to version 2.8.1:
  * FIx typo
  * Update 2.8.1. release notes
  * go 1.16.15</changelog>
  <changelog author="dmueller@suse.com" date="1654689600">- switch to go 1.16 for 2.8.1 (jsc#SLE-24963)
- build the additional commands as well
- rename to follow upstream renaming
- cleanups
- switch to systemd for user generation</changelog>
  <changelog author="fcrozat@suse.com" date="1662724800">- Explicitly require nologin shell which is needed for registry
  system user (bsc#1203324)</changelog>
  <changelog author="dmueller@suse.com" date="1673611200">- add aws-sdk-1.42.27-update.patch to include AWS_ROLE_ARN
  support (SD-106252)</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- add 0001-Fix-runaway-allocation-on-v2-_catalog.patch (CVE-2023-2253, bsc#1207705)</changelog>
  <changelog author="dmueller@suse.com" date="1682510400">- refresh 0001-Fix-runaway-allocation-on-v2-_catalog.patch to
  be more compatible with invalid pagination requests (CVE-2023-2253, bsc#1207705)␣</changelog>
  <changelog author="dmueller@suse.com" date="1683892800">- update to 2.8.2 (bsc#1207705, CVE-2023-2253, bsc#1210428):
  * Revert registry/client: set `Accept: identity` header when
    getting layers
  * Parse `http` forbidden as denied
  * Fix CVE-2023-2253 runaway allocation on /v2/_catalog
  * Fix panic in inmemory driver
  * update to go1.19.9
  * Add code to handle pagination of parts. Fixes max layer size
    of 10GB bug
  * Dockerfile: fix filenames of artifacts
- drop aws-sdk-1.42.27-update.patch (no longer wanted)
- drop 0001-Fix-runaway-allocation-on-v2-_catalog.patch (upstream)</changelog>
</package>
<package pkgid="6dcd8776bd7bd0e83f115ec6a1524c43fcaa89ecd3489101703a7a7d05c07460" name="dlm-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="ff2fb20faaac68ab3d010b404daef647410ad03c883217ff4c516ac4075c4403" name="dlm-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="a872e38b57c6ed58a12dd80b11c5eb18331ad0232b26dd2329eb19fb04203b4c" name="docker" arch="aarch64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="004c0c4264714e5e4e525468e61d31a1fddaed12ae97ecdd8cfe52cbef7442dc" name="docker" arch="ppc64le">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="0e3dc4c7c1786340c7f74a4e4edd41a2623d99625149491e798f4deb0c2fa97f" name="docker" arch="s390x">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="6b700c31aab8b33034f40a6488cb25cd0bd62fd6de5f7b146d80989904ec48db" name="docker" arch="src">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="bfb6e269ee91a7de2a1605afed45c73162b80e67a7a3e5f18640bf6581e0d53d" name="docker" arch="x86_64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="84247b1484809ea651f04155fcffa26e1081f47b05b00c5cd0b5067fb1ec671a" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="f72cba8f3754350eb86fd3d2b49210468b16338d3ca12a38be0fb6ecf4a97f98" name="docker-fish-completion" arch="noarch">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="8e77efb4e9ef00edc65ab3aa4e578c24f0b0779be60f93cbe138fd0d3cd0cf9e" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="5fe727f22c059c2eb863bbe6242016276c997e09be932974f92dc9a0dd460d06" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="715e8217e016860b44136e8be2fa1e10289c186f609c50c7a48088910e9b9bb4" name="dracut" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="13ccaee6749734a15577d002a6ec52780bb700377119d9234dd4f1f9cd081596" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="a93cc82bd1cf62f9db4273c8d74c3f1284b66dbdeabc08092282c043ac8b0e21" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="300274a3b1559a70888a168565b0d4095ec7a08c01f4bd3468becf27be3e7527" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="583fb9edd9563a8f6714f8de0efa7fc48900bbf103d3b335bb3a71fead34e4b0" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="f758f68d64d0764b2a5b86c3e3a42c57c7c4f701551da98f05dfb65d38a4cfc6" name="dracut" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="2f49a3352d0312c1db5295b4a0012c284f4626fcee5af1f3edeb741e26e851fb" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="37c0047e6371b4097a34aad3e09024768d1b86200b46117caa68f01b4d14899d" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="96a4c98444059b49ed7ebe1c26037ebf6fb4e431feaadf75e8be7e1d1426b43b" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="352353c20816624fba355fbbe0c7df0817e3f79fd30a5d2ec98b80a7e3302cb6" name="dracut-extra" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="1d530c4d85075d571f1654230cb995ddc16f64da42b280f8719317c4b31547d1" name="dracut-extra" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="8c8fb369d729a20729ddde4dfdf3fbdeeb508c3dde7cf0051c639017b47b3bea" name="dracut-extra" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="4c3e1c51107ed8bbcd5fb4ea9e0c00529eb20f10154b70abe819cee3acd05cb9" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="d5f84abe6c04ec6cc2065a61d39c24f65d93278a4176a124b0b0e789ef691f61" name="dracut-extra" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="91cb63206fe0c90bebc8057c92bc18bd85116e33b44811b71b0e9705845386f9" name="dracut-extra" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="613f3bc77bb4c0767537826671a636e55a3c4d56eaef577f2529f4b9e89eb66d" name="dracut-extra" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="e67cb8b14d1289762820ad5bda2b50cbe7effedfd093633a995d1dfb4999d9d2" name="dracut-extra" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="eeff16dbe1742f2c3ddf5a9ee8d8ee805c83be13e1a5a50e1f5af0dae6a15f43" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="2f6b8434b2cc3617b2f89932e68774ad0252e79482b353e219e0738aeea29f08" name="dracut-fips" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="279fea352e2fc216d4aa9356731f710621868f29b895a1f0608ed6e83f5c190f" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="71234012b73dd31a7e500bc324a474b108bb9e1dc781f8b0bf0ae0e30c529069" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="1dcdd5831036302b11ef5156bffe2020c05a0de6ce91b785ff177429b5b17b2a" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="91f3c5a8bb508c25e3c98d99ec0ac96e6b1344681d89e8df6b08a18621f779e4" name="dracut-fips" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="7154da6dfb255e3dbd3a2fae4129b76a41cf419dee2bcbf0388ede8ed415c40d" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="eef0952f18e897d37b03de7a328d9a2eb7768def267dcbe442b00623eec4cf8f" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="52ccb30b17613bd275869af66cbd445e8a9c0dc2a648083b8e10700803844486" name="dracut-ima" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="a4989adc79cf341e0e1cab4c0324a240ab33b20e0ad674c7a689684dd3c0312b" name="dracut-ima" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="7a023b2542b79d34cafccabbe01e9d1af3215728c41ee183897a2176221dba16" name="dracut-ima" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="8d34fa3ca29b85ee0157acab65fcdf375c000c28253596c0c31faa01f14bc1cd" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="57c6b8363b2ca62db84f4584acb37808a90c71ffd812f246f18c09de82644022" name="dracut-ima" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="bd77560df8a2208cb98201472c05e7f6cd74c48de1f8a61d20960845c4ac2f95" name="dracut-ima" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="646f0048a867cf4b711913c9bce2b1bddce786f33da2cdf201552605d8a27ebb" name="dracut-ima" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="c81aba60ebc6e0758073564c768754253f2cf565ae8735efcff2874e16fe1359" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="3b8cf252779e44e965d9ea31f0e784f77bd0d8f33bfe49d30463db8012d4378d" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="ff1047c911c8f2139b6e6eb10087a8dc03ec3e8d02a08d4e2e01ebcf01bd0e0e" name="dracut-mkinitrd-deprecated" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="275762bd30cfd0fcb45ec1300071ce78d84e7e15bab31277ce44f9214e1dca9e" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="c1581067c679a7433de83240d23bab327d1b07d1ba94c4f5f60f5337d8f9247c" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="03d7b308b438af485a32f9cacba22d34238012cb0ee4a60402e65fc3e8f5e4a0" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="e3b22a996c6530c3f058431a706d7fed600ff44947b21b94af9abd2ada1987ca" name="dracut-mkinitrd-deprecated" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="5b7d1119cbe41991e15c869a0f8dd2653267f580f6ae483f646e08baf55dbc39" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="95a06e52b36da6e8a998df7e847c94eb1caa15244a9edb1c20134d9eafa7fb5a" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="3fd731491e32070042dc4e296d98c7a97ab7ccb4eed8930c24400de4f7b8a5a5" name="dracut-saltboot" arch="noarch">
  <version epoch="0" ver="0.1.1681904360.84ef141" rel="150000.1.50.1"/>
  <changelog author="nadvornik@suse.com" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="nadvornik@suse.com" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="nadvornik@suse.com" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="oholecek@suse.com" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="nadvornik@suse.com" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="nadvornik@suse.com" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="nadvornik@suse.com" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="nadvornik@suse.com" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="nadvornik@suse.com" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
  <changelog author="nadvornik@suse.com" date="1628078400">- Fix dependencies of python libs (bsc#1188846)
- Update to version 0.1.1628156312.dbd0dec</changelog>
  <changelog author="oholecek@suse.com" date="1657627200">- Update to version 0.1.1657643023.0d694ce
  * Update dracut-saltboot dependencies (bsc#1200970)
  * Fix network loading when ipappend is used in pxe config
  * Add new information messages</changelog>
  <changelog author="nadvornik@suse.com" date="1661256000">- Require e2fsprogs (bsc#1202614)</changelog>
  <changelog author="nadvornik@suse.com" date="1661515200">- Update to version 0.1.1661440542.6cbe0da
  * Use standard susemanager.conf
  * Move image services to dracut-saltboot package
  * Use salt bundle</changelog>
  <changelog author="oholecek@suse.com" date="1667822400">- Update to version 0.1.1665997480.587fa10
  * Add dependencies on xz and gzip to support compressed images</changelog>
  <changelog author="oholecek@suse.com" date="1673265600">- Update to version 0.1.1673279145.e7616bd
  * Add failsafe stop file when salt-minion does not stop (bsc#1172110)
  * Copy existing wicked config instead of generating new (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1676980800">- Update to verion 0.1.1674034019.a93ff61
  * Install copied wicked config as client.xml (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1681905600">- Update to version 0.1.1681904360.84ef141
  * Load network configuration even when missing protocol version
    (bsc#1210640)</changelog>
</package>
<package pkgid="75348d5b14a9cfb068917863ac63c331ae15d21988d39f7d762207ccb13e2ea4" name="dracut-saltboot" arch="src">
  <version epoch="0" ver="0.1.1681904360.84ef141" rel="150000.1.50.1"/>
  <changelog author="nadvornik@suse.com" date="1583841600">- Use more reliable progress output</changelog>
  <changelog author="nadvornik@suse.com" date="1583928000">- Force installation of raid1 kernel module</changelog>
  <changelog author="nadvornik@suse.com" date="1584360000">- Assemble existing RAIDs before searching for salt configuration
- Update to version 0.1.1585064259.12b97ef</changelog>
  <changelog author="oholecek@suse.com" date="1586433600">- Add missing terminal naming modifiers as exported veriables
- Update to version 0.1.1587051918.6bc9e88</changelog>
  <changelog author="nadvornik@suse.com" date="1587643200">- Force install crypt modules
- Update to version 0.1.1588156049.952b58d</changelog>
  <changelog author="nadvornik@suse.com" date="1589284800">- Print a list of available disk devices (bsc#1170824)
- Install wipefs to initrd
- Update to version 0.1.1590413773.a959db7</changelog>
  <changelog author="nadvornik@suse.com" date="1595332800">- Use automatic RAID assembly only in the first phase before
  start of salt
- Update to version 0.1.1595937550.0285244</changelog>
  <changelog author="oholecek@suse.com" date="1597406400">- Set wicked to use plain mac address for computing DHCP DUID
- Copy wicked lease xml file to prevent query for second IP address
  (bsc#1173268)</changelog>
  <changelog author="nadvornik@suse.com" date="1599652800">- Support autosign grains in saltboot intrd
- Update to version 0.1.1602150122.f08af0a</changelog>
  <changelog author="nadvornik@suse.com" date="1612180800">- Use saltboot/defaults file
- Update to version 0.1.1614159840.ef7cad5</changelog>
  <changelog author="nadvornik@suse.com" date="1622203200">- Use kernel parameters from PXE formula also for local boot</changelog>
  <changelog author="nadvornik@suse.com" date="1627473600">- Force installation of libexpat.so.1 (bsc#1188846)
- Update to version 0.1.1627546504.96a0b3e</changelog>
  <changelog author="nadvornik@suse.com" date="1628078400">- Fix dependencies of python libs (bsc#1188846)
- Update to version 0.1.1628156312.dbd0dec</changelog>
  <changelog author="oholecek@suse.com" date="1657627200">- Update to version 0.1.1657643023.0d694ce
  * Update dracut-saltboot dependencies (bsc#1200970)
  * Fix network loading when ipappend is used in pxe config
  * Add new information messages</changelog>
  <changelog author="nadvornik@suse.com" date="1661256000">- Require e2fsprogs (bsc#1202614)</changelog>
  <changelog author="nadvornik@suse.com" date="1661515200">- Update to version 0.1.1661440542.6cbe0da
  * Use standard susemanager.conf
  * Move image services to dracut-saltboot package
  * Use salt bundle</changelog>
  <changelog author="oholecek@suse.com" date="1667822400">- Update to version 0.1.1665997480.587fa10
  * Add dependencies on xz and gzip to support compressed images</changelog>
  <changelog author="oholecek@suse.com" date="1673265600">- Update to version 0.1.1673279145.e7616bd
  * Add failsafe stop file when salt-minion does not stop (bsc#1172110)
  * Copy existing wicked config instead of generating new (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1676980800">- Update to verion 0.1.1674034019.a93ff61
  * Install copied wicked config as client.xml (bsc#1205599)</changelog>
  <changelog author="oholecek@suse.com" date="1681905600">- Update to version 0.1.1681904360.84ef141
  * Load network configuration even when missing protocol version
    (bsc#1210640)</changelog>
</package>
<package pkgid="ebf3f4e6d7e69ca107915192a78e9c2d6c4fcd59571d324e5f7d069e201a46a8" name="dracut-tools" arch="aarch64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="adc8ba9701926e1cdd101023a6f144e098e74b08bae3f625f090dd31c4f21349" name="dracut-tools" arch="ppc64le">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="d92b326718d7b7fd0f36ee1f3775ef993630298e7387da2a5f23a1e24d91587b" name="dracut-tools" arch="s390x">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="5baeff282fd3d624a533d9e617e5ca84296f5f331cd0a9a68a1e6efa14d887ab" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="055+suse.364.g4c1d0276" rel="150500.3.3.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
</package>
<package pkgid="d14a0e29b25d3374835e84e2c4adea9106aeb0d92f1a37ae3849b02596c31f19" name="dracut-tools" arch="aarch64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="5e16a7bddd51918de5ed8f442369857767fccc7b76a0e9250f17845aa42d0c88" name="dracut-tools" arch="ppc64le">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="c97a5c7300734f15b3a5fcb313b70d30d871a8abd96a0dbd476799df2cc7f40f" name="dracut-tools" arch="s390x">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="7f9a0e2e3b69029ee54e47b24ffb51e4716b29ec35a70620e985b799a6a78348" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="055+suse.366.g14047665" rel="150500.3.6.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1664452800">- Update to version 055+suse.300.ge878982d:
  * chore(suse): change default persistent policy (jsc#PED-1885)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665748800">- Update to version 055+suse.306.g5b4feffc:
  * fix(network-legacy): misleading duplicate address detection using wicked (bsc#1201235)
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1667390400">- Update to version 055+suse.325.g6780025c:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.333.g39325ba0:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1674216000">- Update to version 055+suse.343.g0113f4b9:
  A series of changes for the NVMeoF boot feature (jsc#PED-1449):
  * fix(dracut.spec): require jq for nvmf
  * fix(suse/dracut.spec): require program for duplicate IP address detection
  * fix(iscsi): install 8021q module unconditionally
  * fix(nvmf): install 8021q module unconditionally
  * feat(nvmf): enable module if NBFT exists
  * feat(nvmf): add NBFT connect support, and fix configuration priority
  * feat(nvmf): add code for parsing the NBFT
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1675771200">- Update to version 055+suse.345.g8b8708cb:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1678881600">- Update to version 055+suse.353.g5603b001:
  A series of changes for the NVMeoF boot with IPv6 (bsc#1209166):
  * fix(nvmf): move connect logic to initqueue script
  * fix(nvmf): don't assume prefix lenth 64 by default
  * fix(nvmf): prefix syntax for static iBFT IPv6 addresses
  * fix(network): IPv6: don't wait for RA for static IPv6 assignments
  * fix(network-legacy): always include af_packet
  * fix(network): don't assume prefix lenth 64 by default
  * fix(iscsi): prefix syntax for static iBFT IPv6 addresses</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.360.g076f1113:
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1685966400">- Update to version 055+suse.364.g4c1d0276:
  * fix(nvmf): honor rd.timeout for nvme ctrl_loss_tmo (bsc#1211080)
  * fix(nvmf): suppress pointless warning if hostname is not set (bsc#1211072)
  * fix(nvmf): set netroot=nbft (bsc#1210909)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.366.g14047665:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="6aae18f8551b7cdff43c2c5c3bd41fa2405ba45a730d1c0422b2142994669514" name="firewalld-prometheus-config" arch="aarch64">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="f48a8523a0b5734b4d0b6c7f690c91a547dc5eccd11c21c5576c509733e28b02" name="firewalld-prometheus-config" arch="ppc64le">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="9d8e7bc61b2925d86b524359932d8f0cbd7269510d5e43a47d0312270a6dc823" name="firewalld-prometheus-config" arch="s390x">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="8f1f1d1dac028495a77c14d3a0561506132556fefa92c0fb82f3737f96075a8a" name="firewalld-prometheus-config" arch="x86_64">
  <version epoch="0" ver="0.1" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="c5351f54d2c373697720ccfcc831a9d3a5b919eb4b72a287e10748388b47e99a" name="frr" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="9c484b217302707f604837021bf6122560c0d9b65da8f329e4fad3820e9c3e71" name="frr" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="be254e49efb1330572800f90bcba0032358cbce2f9edf070e60265377b4cb653" name="frr" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="06fdb385b8da0f62114a3aa07498712f5d7f625d61ebc69b52cb24cbc145f890" name="frr" arch="src">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="638a60104012448c01fe8a5a4f87c1ec4793b274071ed626bf1cf3d49613576d" name="frr" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="c65a828d487b66d3aceeba02dbf7e56f6d86818ecc02a8af6a58758a5c19dee6" name="frr-devel" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="ad14707fe0a46d73df7c68f50004b123b150c65cd0b1e304d48b43f8e3703de3" name="frr-devel" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="e43164bab56244ff8d082cc4318a94ce6d3d053022714e13c1402d6b33714e7a" name="frr-devel" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="9e95a4639d68f2672e89ca85ed1c6952d6a20693ed1660fdfa99f0750dc05827" name="frr-devel" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="adc72a8e89e6b04b9d6831fdc78e225fec9d8b9463a3a7e7af4aa3af81ff0da5" name="gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="698b783992ac2b83733dc7c77e91f2823ed27e4268782b0095ff9d436dd26846" name="gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fa746a1e1b46b132006cc879a05969886335651c7bcf9c2b3d80ad033305f636" name="gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b23714ec1b45c056eaf48c43bb2e29a10f1bdfc95ffa301bbf635e3ca061a232" name="gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="baac405d78c6de77852268f0f8cf86f4354f7a581d95ef4bed5cf9067ec95a36" name="gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a0f8efdb9fab5e4de0b836e161ef39a62fcc9e945da29e06163915c42f4eb171" name="gcc12-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="26629c38836efe31a7d39b1a95c683ef6d4f98de1419806293ea476c8d0884c7" name="gcc12-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="69787c4719926a5c8d8bf5a247130b0befeee63a77b3d8f163ea075c51b6852d" name="gcc12-PIE" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d897073c637872205932822c1883597dbe0b1c36f1cf03275a498df6189e6126" name="gcc12-PIE" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8cd283e6f6cd29d4498f0acbe2f6e212505a03fc1e6c2acf3992369cfb2b4400" name="gcc12-PIE" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="47d8c5e534a13b5a9e4587837b3178492e63f65c3259b778387ee1ed3ec24c16" name="gcc12-PIE" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5edee9151a3df76a26e3b5a6b8d1ccfb5c79a642a7d135dc02767ff8e1148bdd" name="gcc12-ada" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d26d8f4e6c511242413d9e2ddf5dc294bbaff939ae9c964c036c3dc72e961718" name="gcc12-ada" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="453d3f7ba632de1c48fb9fb7fa37399dd3ce3e5454468a4f71b26c9c113f7622" name="gcc12-ada" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8c3df755f53ed1da632c07d8947085b89d62365fe49ec708aa89eb28df745a25" name="gcc12-ada" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6672a357eee1b24a62f7404227738b72c1bfc0de45f8ed33baa19aff0570dc30" name="gcc12-ada-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="aa5badc3120aed640b7b3aa861bf7fb98413cb2147cd1fae549f6ee53afde954" name="gcc12-ada-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e332d64c01adfc0dfd2b067f58ccb05103f2b81e5a71ce283c77a6445e4d5f31" name="gcc12-c++" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="596532c7bb9abe9d50937cf9b1e4073e42b3dd5b887db873952396c178459c8b" name="gcc12-c++" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8688635153cea0f3db7c649846580bdfa6ac790eab25a2828507cbd0fdf66caf" name="gcc12-c++" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="76f7d82cf2eb4f5bf296825aea3b9877e214db36e055baa12f3db184d5934d8b" name="gcc12-c++" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="93e13047a7adba2138e10e3a5c2fcc0d124601a3ae4bf2690ac58b6b1d25a389" name="gcc12-c++-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2ff89bd547663ecb6f50cb97a36157a1b97bd6d3914cbe29afea88f0b0e5542b" name="gcc12-c++-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="971285ff6a3ecb200fb30396fcfd21c0e2d1692a34872adabb95f6ebd838c7ae" name="gcc12-d" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cae30a2725cfa2bc2228be605e720ea4f12b43e8b3b45fcda1e4d4f8a4a1c172" name="gcc12-d" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e3f0669a349e9a8c8be162b8ddcf177c66e294fb691235099914c1e45772e92a" name="gcc12-d" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a2c8444f214bc61e0e5beb5f505625891a5e1968e6668351af60f159af2369a0" name="gcc12-d-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="17fc07b09246e2f73da6d5c0058fa58114b72ced268cda428e7065f5a50840bf" name="gcc12-d-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a00160e6ad357b1f77b4108d7b8197db2e81b4482c16082a161f207f936b029b" name="gcc12-fortran" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5eed48843e18e7381214227b516fb29e21b7dd96d527a333d6294869ca42e689" name="gcc12-fortran" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8a83088f25746d5a07be260ea108423916eb591de0257c271054329510fe123a" name="gcc12-fortran" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="18c7b06acad40369eb479857fdaea9bb2f34a9dbe2183590149936d2064f1bde" name="gcc12-fortran" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="00cde869ed33d25562c84b7f45a91b9fce01ba607b16e7988353e212c0ee6cc4" name="gcc12-fortran-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="75616e6294dbdfd286abd06f23074260a96729cb90712211299e5ee501446610" name="gcc12-fortran-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="992599285599a4184149c32d42fcd76ee460bf0f601fa79c7a0c7c54617c641e" name="gcc12-go" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="05c89b9389b762ee54bd18cc6f395a2dac17e6cf6e32ada6a49489b25860e35c" name="gcc12-go" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="93c6afcc19dfba040da97dd1d98b5acae5709344f7611e60ff9507bcb73f4430" name="gcc12-go" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="086a1e2ed27a2ff02f307c61beb3ecd55d2b1d576bee57714e9b462b4dd685fa" name="gcc12-go" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ea8bc6c08574b695cc38381f166fe346a93324a4a5d8d339d8396bec0d9cf01b" name="gcc12-go-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="334462cdfe6daf359f597f82b342752059f489ffd6b2a193741dacc05ec10387" name="gcc12-go-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d94f494775cfd7b526873a6cda6f8e5f10293138445b87b0e0761ea011348eb0" name="gcc12-info" arch="noarch">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4b30ef68bcc2243239e8a1ba0245d3ba3b99311f4b8a766da240836afd3db2ab" name="gcc12-locale" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e8bdcbf527638765dcfd2b767e2105fe3b578816212b1957add43d44b7ea5384" name="gcc12-locale" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="aa9fb9f09dd13bada5d00b90de5d920f27bab58280c1d6b1ba7448a4481e0ce4" name="gcc12-locale" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6000b14cf6981f701fa1d8537fb0029343b6e490d851b77bff6e2bcd400dfee0" name="gcc12-locale" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0a6b7ec93cabeba94392466a15a57ac7acb4e6fc3256a64f70d8fffdc3318b06" name="gcc12-obj-c++" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2a14f5c1cac350ab9b8bed038aa7a0cbcd4fe2a26722f5a5faee7104282fc095" name="gcc12-obj-c++" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="eca8b4d2b1a188ee40a319c502cab787352355b918f73d717cfc2e8f8699187c" name="gcc12-obj-c++" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b6b7d1d257eef1ecfa3eea2f748f15718871f18835f4baa92ee55525d8bbd678" name="gcc12-obj-c++" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="824cae23eeda68c4967ee66d6b7592f39389613238281fd1e0b52ca55bfb37c9" name="gcc12-obj-c++-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8d6d5d1b8b286c51f895631ae6eadabfb1ad864190ef39bb86490e8bab800e95" name="gcc12-obj-c++-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d4af7e724f9b647f7b1229b3c37baa49a3faeb76d0f7ebe8d10ab2b970e5e3ee" name="gcc12-objc" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9241e5ab86dd712e77a7ee7582c9baacd7689c056bf4782fad17426ca33c071b" name="gcc12-objc" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9623b2da25fb225a4f812a45ac18ca5374174684a5631768fe4af78b0f07a899" name="gcc12-objc" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="7585f1f819922efa1df54458d78521fd66f83eea382f4db529768443d4af8ac1" name="gcc12-objc" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="bf000d2c6e82145bed51110532d4f391e1c57261cdccec8269e6b9b1b83861a6" name="gcc12-objc-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="457d91525b95b7a46716ae7c5161f4b3685ace4c8237034ad9a6b7580c14d940" name="gcc12-objc-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ceb9e1718d18009a65d2ccafe83e0b849138ce4b5cf8fc632ca22ff2736a07d5" name="gcc12-testresults" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="93640fa5b9fe1685a4b51a66c26b380ae3ddd04f0a8ff9753e1193104cf86cab" name="gcc12-testresults" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c06afae62f97c7bf05cc0ad6baf3aaff7d1092afd42a65a28677359202579f74" name="gcc12-testresults" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="240b092daf40643f22d66242b0c32aae0b2c9b0e2d7b4aa3a62dacbe56d1c7be" name="gcc12-testresults" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="41cd04df8d14a1e937fb971eaab2d7aaa881c9f3a4c315b50ec187e379dd4eab" name="gcc12-testresults" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="174bb803cb38057d566fcf3d5d153ae5e9a88dbe0786c1199b10ffa466e4fa05" name="gdb" arch="aarch64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="2012c29666d28f3a3f188bedfe5db2a7f95cd804d5522002f46d71d311b64f8b" name="gdb" arch="ppc64le">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="8c18a325181a015d4a759362d9f8d1f71759e8ded9043e833039d32b1585050d" name="gdb" arch="s390x">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="a3c8f30957d491cea956899c0cdc0040f4fde64e4923f06ba509c80d001c3845" name="gdb" arch="src">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="3fb8140a6f21ca15db417548f06ee90d75e9cf04098f67dd387988568c4c91b5" name="gdb" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="a3b5715dd0656f1a9ce63edc0d39217e44eb722a98eaf4f889ade3bbf7baf2e1" name="gdb-testresults" arch="aarch64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="b7576f366bef3450a5c1978bca2395d6deea5993a8400d46aba850fe00fc7c87" name="gdb-testresults" arch="src">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="4ce91465241558760445562286bbe160a4f7b525c80197d5ddcd365f6a1e9816" name="gdb-testresults" arch="ppc64le">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="5446d0998e87f6e92d99387c3825d1ab3bff38fd47311c1832c2636300df0654" name="gdb-testresults" arch="s390x">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="fe9a59907b7e6bd81a122b3f94a0da91e413e4ffdd7260e77735d8cce10b08f7" name="gdb-testresults" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="de79990c9d6875d92357696a4f2df510e338f3d040e3c4cb35b2765611f50af6" name="gdbserver" arch="aarch64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="8d1a9c624edd0f25da8720f5992041a8ac7b2bc1456716373bd2858da92e7922" name="gdbserver" arch="ppc64le">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="219a3e841efdcc83549d73586991e921df081942e3c7741aa144d9908293ef79" name="gdbserver" arch="s390x">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="648f6abf95f117aa9c8d17cc142db1cbe1f5af07af76b64082d8852d6f5c1787" name="gdbserver" arch="x86_64">
  <version epoch="0" ver="12.1" rel="150400.15.9.1"/>
  <changelog author="tdevries@suse.com" date="1658750400">- Patches added:
  * powerpc-add-support-for-ieee-128-bit-format.patch
  * powerpc-correct-the-gdb-ioctl-values-for-tcgets-tcsets-tcsetsw-and-tcsetsf.patch
  * gdb-testsuite-remove-target-limits-in-gdb.base-catch-syscall.exp.patch
  * powerpc-fix-for-gdb.base-eh_return.exp.patch
  * fix-comparison-of-unsigned-long-int-to-int-in-record_linux_system_call.patch
  * gdb-testsuite-fix-gdb.reverse-test_ioctl_tcsetsw.exp-with-libc-debuginfo.patch
  * fixup-gdb-test-bt-cfi-without-die.patch
  * fix-core-file-detach-crash-corefiles-29275.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-out-of-range-end-of-seq.exp-on-aarch64.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-without-enable-targets.patch
  * gdb-testsuite-fix-gdb.base-catch-syscall.exp-with-with-expat-no.patch
  * fix-for-gdb.base-solib-search.exp-test.patch
- Patch removed:
  * gdb-6.7-ppc-clobbered-registers-O2-test.patch
  * gdb-6.5-readline-long-line-crash-test.patch
- Patches updated:
  * gdb-tdep-update-syscalls-ppc64-ppc-linux.xml.patch
  * gdb-testsuite-handle-pipe2-syscall-in-gdb.base-catch-syscall.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1658750401">- Also remove gdb-6.5-readline-long-line-crash-test.patch from
  patches list in gdb.spec.</changelog>
  <changelog author="tdevries@suse.com" date="1658836800">- Actually apply fixup-gdb-test-bt-cfi-without-die.patch and
  fixup-2-gdb-rhbz1553104-s390x-arch12-test.patch.</changelog>
  <changelog author="tdevries@suse.com" date="1658923200">- Maintenance script qa-local.sh:
  * Use have_combo consistently.
- Maintenance script qa.sh:
  * Add kfail_aarch64.
  * Add PR29419/PR29409 kfails.
  * Update PR29247 kfails.
- Patches added:
  * make-gdb.ada-float-bits.exp-more-generic.patch
  * gdb-testsuite-fix-gdb.ada-literals.exp-with-aarch64.patch</changelog>
  <changelog author="tdevries@suse.com" date="1659009600">- Patches added:
  * gdb-fix-watchpoints-triggered.patch
- Maintenance script qa.sh:
  * Add kfails for PR25038, PR29253, and PR29423.
  * Remove gdb.mi/mi-var-invalidate-shlib.exp kfails.
- Mention qa-local.sh, qa-remote.sh and README.qa as sources.</changelog>
  <changelog author="tdevries@suse.com" date="1659096000">- Patches added:
  * gdb-testsuite-fix-gdb.threads-killed-outside.exp-on-aarch64.patch
- Maintenance script qa.sh:
  * Remove PR29247 internal-error.
  * Add SLE-15/aarch64 to "known clean configs".</changelog>
  <changelog author="tdevries@suse.com" date="1659182400">- Maintenance script qa.sh:
  * Add SLE-12/x86_64 to "known clean configs".
  * Add fail for PR29405.
  * Add fail for PR26915.</changelog>
  <changelog author="tdevries@suse.com" date="1659441600">- Fix build with gcc 13 by using -Wno-error=enum-int-mismatch.</changelog>
  <changelog author="mliska@suse.cz" date="1661169600">- Enable debuginfod for all archs as we index all TW RPM files.
- Recommend libdebuginfod1 when one installs gdb so that
  it can utilize debuginfod server by default.</changelog>
  <changelog author="tdevries@suse.com" date="1662120000">- Maintenance script qa.sh:
  * Generalize PR29405 kfails.
- Maintenance script qa-remote.sh:
  * Make rpm matching more precise.
- Patches added:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch</changelog>
  <changelog author="dmueller@suse.com" date="1663848000">- use python3-xml if python is python3</changelog>
  <changelog author="tdevries@suse.com" date="1663934400">- Maintenance script qa-remote.sh:
  * Make rpm matching yet more precise.
- Update patch:
  * gdb-tdep-fix-powerpc-ieee-128-bit-format-arg-passing.patch
- Add patches:
  * gdb-handle-pending-c-after-rl_callback_read_char.patch
  * gdb-testsuite-fix-have_mpx-test.patch
  * gdb-symtab-fix-handling-of-dw_tag_unspecified_type.patch
  * gdb-testsuite-fix-gdb.dwarf2-dw2-unspecified-type-foo.c-with-m32.patch</changelog>
  <changelog author="tdevries@suse.com" date="1664366400">- Patches added:
  * gdb-testsuite-fix-gdb.mi-mi-sym-info.exp-on-opensuse-tumbleweed.patch
- Maintenance script qa.sh:
  * Add PR26873 kfails.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Add patch to fix build with readline 8.2:
  * gdb-add-support-for-readline-8.2.patch</changelog>
  <changelog author="tdevries@suse.com" date="1666180800">- Patches added (swo#29277):
  * gdb-fix-assert-in-handle_jit_event.patch
- Maintenance script qa.sh:
  * Add PR29706 and PR28617 kfails.</changelog>
  <changelog author="tdevries@suse.com" date="1667995200">- Patches removed (ok for Factory, not for SLE):
  * gdb-fix-watchpoints-triggered.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513600">- Patches added (backport from trunk):
  * gdb-testsuite-fix-gdb.base-break-idempotent.exp-on-ppc.patch
  * powerpc-fix-gdb.base-watchpoint.exp-on-power-9.patch</changelog>
  <changelog author="tdevries@suse.com" date="1668513601">- Reinstate debuginfod support for suse_version &gt;= 1500
  (bsc#1185605, jsc#PED-1149, jsc#PED-1138).
- Don't recommend libdebuginfod1.</changelog>
  <changelog author="tdevries@suse.com" date="1680091200">- Patches dropped (bsc#1207712):
  * gdb-container-rh-pkg.patch
- Patches added (bsc#1207712):
  * gdb-testsuite-add-gdb.suse-debranding.exp.patch</changelog>
  <changelog author="tdevries@suse.com" date="1681819200">- Fix license, again (bsc#1210081).</changelog>
</package>
<package pkgid="92c13525aa21a3ede97622da7ba9d8ff5d58dae3b19ab4593a012a4d3be65e28" name="geoipupdate" arch="aarch64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="61f56f47a0ed2c7a3c02f5dc94141d9986af0f08a5a89d9fc4fd89d42930cc0d" name="geoipupdate" arch="ppc64le">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="a01d91a0856efecda0776b4e22ed41ec881d7af3eba33cbea3abb75ddac8a433" name="geoipupdate" arch="s390x">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="c80063eb781ee94afa6d48881123866faefa269a8be544be93eb84845aa38ea2" name="geoipupdate" arch="src">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="f356a0c7422705fb8ae426f7e27b67b692ab7229f839c6582cbdf0f119cc940c" name="geoipupdate" arch="x86_64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="3fa1ec4e59dbf4f7fd15f7c2e7aa809ff4e07317dfafc052c53ae8d99c85949d" name="geoipupdate-legacy" arch="aarch64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="bc2b230b4be2e2b7c42d44b224c19b4092075047d6343ef1adf0cdfcf0f618d2" name="geoipupdate-legacy" arch="ppc64le">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="1f719f02c46fb0d6bf6151493e3ef810fcf23be3edf44dd188c53a513698aebe" name="geoipupdate-legacy" arch="s390x">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="b6eaf8048550faf325a68b0ed23b0d0b03f1fd4e20822d9a6bd77445f7f67993" name="geoipupdate-legacy" arch="x86_64">
  <version epoch="0" ver="4.2.2" rel="150000.1.10.1"/>
  <changelog author="mpluskal@suse.com" date="1424520000">- Initial packaging</changelog>
  <changelog author="p.drouand@gmail.com" date="1446984000">- Update to version 2.2.1
  * Version bump to fix PPA issue
- Changes from version 2.2.0
  * geoipupdate now verifies the MD5 of the new database before
    deploying it. If the database MD5 does not match the expected MD5,
    geoipupdate will exit with an error.
  * The copy of base64.c and base64.h was switched to a version under
    GPL 2+ to prevent a license conflict.
  * The LICENSE file was added to the distribution.
  * Several issues in the documentation were fixed.
- Remove gpl-2.0.txt; now included in the tarball
- Perform a spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1454587200">- Update to version 2.2.2
  * geoipupdate now calls fsync on the database directory after a
    rename to make it durable in the event of a crash.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467374400">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1483617600">- Update to version 2.3.1:
  * geoipupdate now uses TCP keep-alive when compiled with cURL
    7.25 or greater.
  * Previously, on an invalid gzip file, geoipupdate would output
    binary data to stderr. It now displays an appropriate error
    message.
  * Install README, ChangeLog, GeoIP.conf.default etc into docdir.
  * $(sysconfdir) is now created if it doesn't exist.
  * The sample config file is now usable.</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1508155200">- Update to version 2.4.0:
  * geoipupdate now checks that the database directory is writable.
    If it is not, it reports the problem and aborts.
  * geoipupdate now acquires a lock when starting up to ensure only
    one instance may run at a time. A new option, LockFile, exists
    to set the file to use as a lock. By default, LockFile is the
    file .geoipupdate.lock in the database directory.
  * geoipupdate now prints out additional information from the
    server when a download request results in something other than
    HTTP status 2xx. This provides more information when the API
    does not respond with a database file. In conjunction with
    changes to the download service itself, errors such as lacking
    a subscription no longer show up with the message "not a valid
    gzip file".
  * ${datarootdir}/GeoIP is now created on make install.</changelog>
  <changelog author="mpluskal@suse.com" date="1510833600">- Update to version 2.5.0:
  * Document the LockFile option in the GeoIP.conf man page.
  * Remove unused base64 library.
  * Add the new configuration option PreserveFileTimes. If set, the
    downloaded files will get the same modification times as their
    original on the server. Default is 0 (unset).
  * Use the correct types when calling curl_easy_setopt().
  * In GeoIP.conf, the UserId option was renamed to AccountID and
    the ProductIds option was renamed to EditionIDs. The old
    options will continue to work, but upgrading to the new names
    is recommended for forward compatibility.
- Cleanup previous changelog entry
- Run tests during build</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1560945600">- Fixed build
- Update to version 3.1.1
  * This version now allows parsing of license keys longer than 12
    characters.
- Update to version 3.1.0
  * This version restores the ability to use the `AccountID` / `UserId`
    999999 along with an all-zero license key when downloading free
    databases. However, the use of this combination is not recommended
    and may break in future versions.
  * When printing verbose output, only the first four character of the
    `LicenseKey` will now be displayed.
- Update to version 3.0.1
  * When there were no updates available, 3.0.0 incorrectly returned an
    exit code of 1 instead of 0. This release reverts to the pre-3.0.0
    behavior, returning an exit code of 0 in this case.
- Update to version 3.0.0
  * BREAKING CHANGE: When downloading the free databases without a
    MaxMind account, you must either not have `AccountID`, `UserId`,
    or `LicenseKey` set in your configuration file or they must be set
    to the zero values previously recommended in our documentation. Any
    other value will cause an authorization error.
  * BREAKING CHANGE: The configuration options `Protocol`,
    `SkipPeerVerification`, and `SkipHostnameVerification` are no longer
    supported. If they are present in the configuration file, they will
    be ignored. HTTPS with peer and hostname verification will be used
    on all requests.
  * BREAKING CHANGE: The configuration file must have the `AccountID`
    or the deprecated `UserId` when downloading a paid database.
    Previously, when downloading the GeoIP Legacy Country database, you
    were able to only provide the `LicenseKey`.
  * IMPORTANT: `geoipupdate-pureperl.pl` has been removed and will no
    longer be distributed with `geoipupdate`. This Perl script had known
    issues and did not have feature parity with the C implementation. If
    you were using the Perl version, we recommend that you switch to the
    C version. If you are not able to do this, you may continue using the
    Perl version distributed with 2.5.0.
  * This program no longer uses the following endpoints:
    `/app/update_getipaddr`, `/app/update`, and `/app/update_secure`.
    `/geoip/databases/{edition_id}/update` is now used instead.
  * Fixed issue in `gu_strnlen()` dereferencing a pointer before checking
    that it was in array bounds. Issue found by fcntl.
  * We now update the default GeoIP.conf during installation so that
    directory paths match build parameters. Previously this config always
    said the data directory was under /usr/local/share which was not always
    accurate.
  * Improve the error checking and display the underlying reason for the
    error when possible. Reported by Jonathan Kosgei. GitHub #82.
  * Document that the `LockFile` is not removed from the filesystem after
    a successful exit from the program. GitHub issue #79.
  * Make default configuration directory agree with default installation
    directory.</changelog>
  <changelog author="wr@rosenauer.org" date="1561032000">- added systemd timer for weekly updates
  (needs to be enabled by admin)</changelog>
  <changelog author="info@paolostivanin.com" date="1583236800">- Update to 4.2.2
  A lot of changes since last release. Please have a look at
  https://github.com/maxmind/geoipupdate/releases for more info</changelog>
  <changelog author="info@paolostivanin.com" date="1583236801">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323200">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year</changelog>
  <changelog author="info@paolostivanin.com" date="1583323201">- Update to version 4.2.2:
  * Prepare for 4.2.2
  * Use go get on 1.10
  * Only use debug.ReadBuildInfo on 1.12+
  * Update changelog
  * Set required Go version to 1.10
  * Test back to Go 1.10
  * Do not unnecessarily use errors.Is
  * Add changelog for #76
  * Update for GoReleaser nfpm section change
  * Bump copyright year
- Add disable-pandoc.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1584100800">- introduce geoipupdate-legacy script [bsc#1156194]
- added sources
  + geoipupdate-legacy</changelog>
  <changelog author="vcizek@suse.com" date="1585224000">- Make /etc/GeoIP.conf readable only by root as it contains MaxMind
  account information now
- Add README.SUSE with description how to get the latest data
  (jsc#SLE-11184, jsc#ECO-1405)</changelog>
  <changelog author="vcizek@suse.com" date="1587124800">- Fix license, it's actually Apache-2.0 or MIT (bsc#1169766)</changelog>
</package>
<package pkgid="6c30d6e425c90a029e4aa308c2f6f46b85cbacfaebe3b43a64175058e4c1c963" name="gfs2-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="7dd29a2b701b07c38bbdee809961853355ea37e2612601b52e79911b3671511a" name="gfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="ef5c9c427ed6b9d4a4fb17d37d405086acfe88862a7a6045945ed760e50282b2" name="glassfish-jax-rs-api" arch="noarch">
  <version epoch="0" ver="2.1.6" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of glassfish-jax-rs-api 2.1.5</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Change the tarball location, since the old location does not work
  any more
- Clean the spec file a bit</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.1.6:
  * Fixed spec version and updated template to include Final Release if &lt;status&gt; is empty.
  * Added Eclipse copyright notice.
  * Set copyright footer to 2019 Eclipse Foundation.
  * Use Jakarta instead of Java.
  * Include link to license in footer as well.</changelog>
</package>
<package pkgid="76820c11854d5f05dcd6f7bff981edb66302aef49c4053dc1d590043ec25a10d" name="glassfish-jax-rs-api" arch="src">
  <version epoch="0" ver="2.1.6" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of glassfish-jax-rs-api 2.1.5</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Change the tarball location, since the old location does not work
  any more
- Clean the spec file a bit</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.1.6:
  * Fixed spec version and updated template to include Final Release if &lt;status&gt; is empty.
  * Added Eclipse copyright notice.
  * Set copyright footer to 2019 Eclipse Foundation.
  * Use Jakarta instead of Java.
  * Include link to license in footer as well.</changelog>
</package>
<package pkgid="cdb7a33a3b10f233ada7e9f6378e4cd8f2f94c7fadbb342b40e7fda7a4297b9d" name="glassfish-jax-rs-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.1.6" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of glassfish-jax-rs-api 2.1.5</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="fstrba@suse.com" date="1651752000">- Change the tarball location, since the old location does not work
  any more
- Clean the spec file a bit</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.1.6:
  * Fixed spec version and updated template to include Final Release if &lt;status&gt; is empty.
  * Added Eclipse copyright notice.
  * Set copyright footer to 2019 Eclipse Foundation.
  * Use Jakarta instead of Java.
  * Include link to license in footer as well.</changelog>
</package>
<package pkgid="02a546ff352407f64335146bf8bec98209e21ed1dbf8da078f68b458cce58235" name="glassfish-jsp-api" arch="noarch">
  <version epoch="0" ver="2.3.3" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1554724800">- Initial packaging of glassfish-jsp-api 2.3.3
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Avoid version ranges for dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1572609600">- Generate tarball using source services
- Take the LICENSE file from the git repository and LICENSE-2.0
  from Apache</changelog>
  <changelog author="fstrba@suse.com" date="1655208000">- Add alias to javax.servlet.jsp:jsp-api</changelog>
</package>
<package pkgid="1518b87bee2bae51f6029d1213482c2840951003e8875f4c318ccba70eaccd76" name="glassfish-jsp-api" arch="src">
  <version epoch="0" ver="2.3.3" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1554724800">- Initial packaging of glassfish-jsp-api 2.3.3
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Avoid version ranges for dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1572609600">- Generate tarball using source services
- Take the LICENSE file from the git repository and LICENSE-2.0
  from Apache</changelog>
  <changelog author="fstrba@suse.com" date="1655208000">- Add alias to javax.servlet.jsp:jsp-api</changelog>
</package>
<package pkgid="308d355c101956cfd1611c3c9ba391e30323fa3fb7e31e7de0839f35e5df6819" name="glassfish-jsp-api-javadoc" arch="noarch">
  <version epoch="0" ver="2.3.3" rel="150200.3.3.1"/>
  <changelog author="fstrba@suse.com" date="1554724800">- Initial packaging of glassfish-jsp-api 2.3.3
- Generate and customize ant build.xml file</changelog>
  <changelog author="fstrba@suse.com" date="1570017600">- Avoid version ranges for dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1572609600">- Generate tarball using source services
- Take the LICENSE file from the git repository and LICENSE-2.0
  from Apache</changelog>
  <changelog author="fstrba@suse.com" date="1655208000">- Add alias to javax.servlet.jsp:jsp-api</changelog>
</package>
<package pkgid="cfc03970c2d04e0daef5f0d580b8cf593897c3d0c5a37a1cdf3c9bd49350914a" name="go" arch="aarch64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="3d339e1293afd0cce46f30dac1e3867ce466a59ca72da4e2537a3927c767ee97" name="go" arch="ppc64le">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="3bc7d15d8fd28e3b416054033ebaea51d8328cec85767e6d46d4638c0fe0601f" name="go" arch="s390x">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="3094dc77e3ff3f1d776f20144ca8d102f6f72a1359c20c4088b36ce0cdf43979" name="go" arch="src">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="fc3d348ab6f944cef1e8712e38fe747d7ecae05e8929c671c671deb0e9eb323c" name="go" arch="x86_64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="4cb7450e67c4242b28112aad742505e8d2498b48b03537dc479a864afe358609" name="go-doc" arch="aarch64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="82a3a934693e39753ee5dbf1020d4719e927992e2a88daec3f1540cce5ab3e7d" name="go-doc" arch="ppc64le">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="963bf49c7030fb723d476c84793b0d74bed5441a384fc73aa16634806dc2c450" name="go-doc" arch="s390x">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="803e6ef156c5ba9f1982750918cf291161593fbceeadd963a9d6e912b94b5b1d" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="897e1d8318f6534bacea8c7bff6f4ec728a79c437892b4e547c2af8ea2778531" name="go-race" arch="aarch64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="33087e54c0a92c493b17294ef54e4f28412338376fdeeb3b1d79ae1d084a6941" name="go-race" arch="ppc64le">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="cef89778e035a076827f7b81da0faaa94931a7eae2a61166c84628b3d98223e0" name="go-race" arch="s390x">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="f69f974ae56f2fba405109bafa95df72338364fbc811b8139a93cd0d135b49d8" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.20" rel="150000.3.29.1"/>
  <changelog author="jkowalczyk@suse.com" date="1538136000">- Fix stray 1.10 version reference preventing 1.11 only package solutions</changelog>
  <changelog author="jkowalczyk@suse.com" date="1538827200">- Update to version 1.11.1:
  * includes fixes to the compiler, documentation, go command, runtime,
    and the crypto/x509, encoding/json, go/types, net, net/http and reflect
    packages.
- cmd/compile:
  * bad walkinrange rewrites on constant above 2**63
  * function compiled without bounds checking and -1 index access
  * missing bounds checks in 1.11
  * panic in cmd/compile/internal/gc.typecheck1
  * race detector detects race with close(chan) and len(chan)
- cmd/go:
  * 'go test -gcflags=all=-l' appears not to disable inlining
  * GOMIPS environment variable does not affect caching of mipsle code
  * TestScript/mod_install_versioned consistently failing on macOS High Sierra
  * build fails when setting linker to lld using ldflags
  * go list -json -compiled -test -e upspin.io/test fails with non-zero exit status
- doc:
  * GOFLAGS environment variable not in 1.11 release notes
  * downloads page claims that Go 1.11 supports unsupported operating systems Documentation
- encoding/json:
  * empty fields in json.UnmarshalTypeError
- go/types:
  * assertion failure setting up composite literal with incomplete element type
  * some facts are missing after an error
- net/http:
  * WASM Roundtripper crash when using "no-cors" mode
- net:
  * LookupTXT bug
  * empty DNS answers should fail fast
  * testSpliceReaderAtEOF closed connection: got err = splice: invalid argument
- reflect:
  * MethodByName().Interface() leads to fatal error: sweep increased allocation count
- runtime:
  * invalid pointer found on stack
  * timeouts in os/signal tests</changelog>
  <changelog author="asarai@suse.com" date="1540987200">- Remove golang(API) provides, since the go&lt;ver&gt; packages now provide this and
  providing it here causes issues when building under SLE12 (not to mention
  being confusing -- since golang(API) is used to pin versions). boo#1114209</changelog>
  <changelog author="asarai@suse.com" date="1542110400">- Revert golang(API) removal since it turns out this breaks &gt;= requires in
  certain cases. Instead we recommend that folks set Prefer: go in all of their
  projects. boo#1114209</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544702400">- Update to Go 1.11.3 (released 2018/12/13). This includes fixes to
  the crypto/x509 and cmd/go packages. See the Go 1.11.3 milestone
  on upstream tracker for details:
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.3
  * bsc#1118897 CVE-2018-16873
    go#29230 cmd/go: remote command execution during "go get -u"
  * bsc#1118898 CVE-2018-16874
    go#29231 cmd/go: directory traversal in "go get" via curly braces in import paths
  * bsc#1118899 CVE-2018-16875
    go#29233 crypto/x509: CPU denial of service
  * Upstream is aware of a functionality regression in "go get" when
    executed in GOPATH mode on an import path pattern containing "..."
    (e.g., "go get github.com/golang/pkg/..."), when downloading
    packages not already present in the GOPATH workspace. This is go#29241
    and will be resolved in the next minor patch release go-1.11.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1544875200">- go1.11.4 (released 2018/12/14) includes fixes to cgo, the compiler, linker,
  runtime, documentation, go command, and the net/http and go/types packages.
  It includes a fix to a bug introduced in Go 1.11.3 that broke go get for
  import path patterns containing "...". See the Go 1.11.4 milestone on our
  issue tracker for details.
  https://github.com/golang/go/issues?q=milestone%3AGo1.11.4+label%3ACherryPickApproved
  * go#29272 misc/cgo/test: issue24161 tests broken on Darwin
  * go#29248 cmd/go: "go get" fails on import path patterns with wildcards ("...")
  * go#29191 cmd/go: symbolic links not dropped from repo
  * go#29112 cmd/link: too many open files on high object-count dependencies
  * go#28974 cmd/go: need to backport relaxing of go.mod go verb constraints to 1.11 series
  * go#28972 go/types: problem with alias type
  * go#28916 cmd/cgo: nested structure has too much alignment padding
  * go#28799 runtime: fatal error: out of memory on reslice with negative index
  * go#28752 reflect: scanning invalid return slots during a makeFunc call
  * go#28725 cmd/go: panic when argument doesn't match any packages
  * go#28694 cmd/compile: inline multiplication corrupts an argument on arm
  * go#28690 runtime: ThreadSanitizer CHECK failed
  * go#28673 x/net/http2: Transport is leaking streams on broken Body
  * go#28617 cmd/compile: panic during fuse with if true block containing a goto and a return
  * go#28586 cmd/compile: go binaries not working on exynos 64 bit CPUs
  * go#27395 cmd/cgo: typedef pointer arguments regression
  * go#27383 cmd/compile: failure on a function type alias</changelog>
  <changelog author="jkowalczyk@suse.com" date="1548331200">- go1.11.5 (released 2019/01/23) security release fixes CVE-2019-6486 (bsc#1123013).
  * go#29903 crypto/elliptic: CPU DoS vulnerability affecting P-521 and P-384</changelog>
  <changelog author="jkowalczyk@suse.com" date="1552305600">- go1.12 (released 2019/02/25) includes changes in the implementation of the
  toolchain, runtime, and libraries. As always, the release maintains the Go 1
  promise of compatibility. Upstream expects almost all Go programs to continue
  to compile and run as before.
  * GO111MODULE=on enables module-aware operations outside of a module directory
  * GODEBUG=tls13=1 enables opt-in support for TLS 1.3 in the crypto/tls package
    per RFC 8446. Will be default in go1.13.
  * trace tool now supports plotting mutator utilization curves, including
    cross-references to the execution trace. These are useful for analyzing the
    impact of the garbage collector on application latency and throughput.
  * arm64 assembler platform register renamed from R18 to R18_PLATFORM
  * improvements to gc
  * race detector is now supported on linux/arm64
  * cgo is now supported on linux/ppc64
  * go1.12 is the last release that will support binary-only packages.</changelog>
  <changelog author="mrueckert@suse.de" date="1552305601">- bump the package only to 1.12 for distros where this actually
  builds</changelog>
  <changelog author="jkowalczyk@suse.com" date="1566388800">- Change suse_version &gt;= 1315 (was 1550) defines short_version 1.12
  go1.12 packages are available for SLE-12.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1587124800">- Update to current stable go1.14
  Refs boo#1164903 go1.14 release tracking
  * Remove redundant Provides: go-doc=%{version} per rpmlint warning</changelog>
  <changelog author="asarai@suse.com" date="1591444800">- Ensure 'Provides: golang(API) = %{api_version}' is consistent
  to improve package resolution for common go dependency expressions
  'BuildRequires: golang(API) &gt;= 1.x' and BuildRequires: go &gt;= 1.x
  OBS projects that contain go code often have prjconf entries
  'Prefer: go' which selects go metapackage over go1.x packages.
  When go metapackage Provides: version is lower than go1.x versions,
  'Prefer: go' is not effective and build failures occur with errors
  unresolvable: have choice for golang(API) &gt;= 1.13: go1.13 go1.14
  Edits and changelog Jeff Kowalczyk &lt;jkowalczyk@suse.com&gt;
  Refs boo#1172608
  * Unify '{version'} and '{short_version}' as '{api_version}' for
    'Provides: golang(API) = %{api_version}'
  * Use both 'BuildRequires: go%{api_version}' and 'Requires: go%{api_version}'
    to trigger build errors if go1.x is unavailable
  * Add aarch64 to supported systems for go-race via
    %define tsan_arch x86_64 aarch64
  * Add tsan_arch x86_64 aarch64 for suse_version &gt;= 1500 and
    sle_version &gt;= 150000, formerly conditional on suse_version &gt;= 1315
  * Ensure %ifarch %{tsan_arch} always evaluates (nil does not work)
    via dummy tsan_arch on systems where go-race is not supported</changelog>
  <changelog author="schwab@suse.de" date="1593518400">- Enable for riscv64</changelog>
  <changelog author="ngompa13@gmail.com" date="1598616000">- Add golang Provides for RH/Fedora compatibility</changelog>
  <changelog author="jkowalczyk@suse.com" date="1613476800">- Update to current stable go1.15
  Refs boo#1175132 go1.15 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1614340800">- Update to current stable go1.16
  Refs boo#1182345 go1.16 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1632225600">- Update to current stable go1.17
  Refs boo#1190649 go1.17 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1649419200">- Update to current stable go1.18
  Refs boo#1193742 go1.18 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661256000">- Update to current stable go1.19
  Refs boo#1200441 go1.19 release tracking
- Add define tsan_arch s390x ppc64le new in go1.19</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Update to current stable go1.20
  Refs boo#1206346 go1.20 release tracking
- Packaging improvements:
  * Re-enable debuginfo boo#1210938 remove spec comment "# nodebug"
  * Use Group: Development/Languages/Go instead of Other</changelog>
</package>
<package pkgid="38c435583dc0f9e3c4647747992f60a392b45cbce38307d5e16f1dd5b0a4cfc4" name="go1.18-openssl" arch="aarch64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="81b2d8e4e4c0264897d2b626f8a35a698ab931509b8fb020e8689f62169d8f91" name="go1.18-openssl" arch="ppc64le">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="22f328960948e41b8df62079fffe05754f7e1e859530fad08e7c5dd90f035adf" name="go1.18-openssl" arch="s390x">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="ce6123a58754a4e3292ddcbaad83562d8fc4a8ad27b39d04b92c22deccd6f755" name="go1.18-openssl" arch="src">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="c8321f93bfe59217e159642e87c63a48042903bd884192b97ab7cbbd5dae2b69" name="go1.18-openssl" arch="x86_64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="a36b653ea07b1d4d010e187f0cdc104982be1e9701c1ac2e3dcf8d0f3d59e66c" name="go1.18-openssl-doc" arch="aarch64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="79f6a8f66cebcca922b661844525cd304ed80d1c0a57c61cc1f09ac7cd8e31e9" name="go1.18-openssl-doc" arch="ppc64le">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="4d19de13e93dd6da94e269f079e20194f7652300ac85ebacb14f3d6f074cfc41" name="go1.18-openssl-doc" arch="s390x">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="a36bf55fc153f7de122888d57bea92d5fb2c967afcbcd1d645154969f552ffa1" name="go1.18-openssl-doc" arch="x86_64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="c7eacc046a55c26d6c9cfb351c8b0aa8d5a071bf5a743445091fab9b4e1515ef" name="go1.18-openssl-race" arch="aarch64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="79aefc18c04062d358d6747af89d80e31cee8721e8b7001df0f5aa5874e831ba" name="go1.18-openssl-race" arch="x86_64">
  <version epoch="0" ver="1.18.10.1" rel="150000.1.9.1"/>
  <changelog author="jkowalczyk@suse.com" date="1658318400">- Update to version 1.18.4.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.4-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.4 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1659355200">- go1.18.5 (released 2022-08-01) includes security fixes to the
  encoding/gob and math/big packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the testing package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-32189
  * boo#1202035 CVE-2022-32189 go#53871
  * go#54095 math/big: index out of range in Float.GobDecode
  * go#53883 cmd/compile: interface conversion with generics reports "types from different scopes"
  * go#53875 cmd/go: livelock when computing module graph in a workspace with GOPROXY=off
  * go#53852 cmd/compile: internal compiler error: assertion failed
  * go#53847 runtime: modified timer results in extreme cpu load
  * go#53119 cmd/go: Build information embedded by Go 1.18 impairs build reproducibility with cgo flags
  * go#53112 runtime: gentraceback() dead loop on arm64 casued the process hang
  * go#52986 testing: TempDir RemoveAll cleanup failures with "The process cannot access the file because it is being used by another process."
  * go#52961 cmd/compile: miscompilation in pointer operations</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366400">- Update to version 1.18.5.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.5-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.5 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366401">- go1.18.6 (released 2022-09-06) includes security fixes to the
  net/http package, as well as bug fixes to the compiler, the go
  command, the pprof command, the runtime, and the crypto/tls,
  encoding/xml, and net packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-27664
  * go#53977 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54733 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54725 cmd/compile: compile failed with "Value live at entry"
  * go#54674 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54664 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54659 cmd/go: go test -race does not set implicit race build tag
  * go#54642 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54636 cmd/go: data race in TestScript
  * go#54603 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54502 cmd/link: Trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54464 cmd/pprof: graphviz node names are funny with generics
  * go#54128 encoding/xml: crash on android/arm64 due to https://go.dev/cl/417062
  * go#54074 net: WriteMsgUDPAddrPort should accept IPv4 destination addresses on IPv6 UDP sockets
  * go#54056 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#53397 go/reflect: Incorrect behavior on arm64 when using MakeFunc / Call</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664366402">- Update to version 1.18.6.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.6-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.6 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.18.7 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, and the go/types package.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55950 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55925 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55842 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55151 fatal error: bulkBarrierPreWrite: unaligned arguments
  * go#55148 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55113 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54918 cmd/compile: Value live at entry</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667217600">- Update to version 1.18.7.2 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.7-2-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.7 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.18.8 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  runtime.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41716
  * go#56327 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56308 runtime: "runtime·lock: lock count" fatal error when cgo is enabled</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667563200">- Update to version 1.18.8.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.8-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.8 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.18.9 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to cgo, the
  compiler, the runtime, and the crypto/x509 and os/exec packages.
  Refs boo#1193742 go1.18 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57008 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57005 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56751 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56709 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56675 x/net/http2/h2c: ineffective mitigation for unsafe io.ReadAll
  * go#56635 runtime: traceback stuck in runtime.systemstack
  * go#56556 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56550 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56437 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56396 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56359 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- Update to version 1.18.9.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.9-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.9 into dev.boringcrypto.go1.18
  * [dev.boringcrypto.go1.18] crypto/tls: allow BoringCrypto to use 4096-bit keys</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.18.10 (released 2023-01-10) includes fixes to cgo, the
  compiler, the linker, and the crypto/x509, net/http, and syscall
  packages.
  Refs boo#1193742 go1.18 release tracking
  * go#57705 misc/cgo: backport needed for dlltool fix
  * go#57426 crypto/x509: Verify on macOS does not return typed errors
  * go#57344 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57338 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57213 os: TestLstat failure on Linux Aarch64
  * go#57211 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57057 cmd/go: remove test dependency on gopkg.in service
  * go#57054 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#57044 cgo: malformed DWARF TagVariable entry
  * go#57028 cmd/cgo: Wrong types in compiler errors with clang 14
  * go#56833 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56711 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56323 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1674129600">- Update to version 1.18.10.1 cut from the go1.18-openssl-fips
  branch at the revision tagged go1.18.10-1-openssl-fips.
  * Merge branch dev.boringcrypto.go1.18 into go1.18-openssl-fips
  * Merge go1.18.10 into dev.boringcrypto.go1.18</changelog>
  <changelog author="jjindrak@suse.com" date="1677672000">- Fix for SG#65262, bsc#1208491:
  * go#57855 boo#1208270 security: fix CVE-2022-41723 bsc1208491.patch
  * go#58001 boo#1208271 security: fix CVE-2022-41724 bsc1208491-41724.patch
  * go#58006 boo#1208272 security: fix CVE-2022-41725 bsc1208491-41725.patch</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
</package>
<package pkgid="2b6c01345227533f9dd90c990f9c32d350cb214a1b1d3f1c532ee5de3873d1c7" name="go1.19" arch="aarch64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="00a54eb9b10132b6ccfb6c06d4c350d06c72706b624d1db9d4e1313eefdb6fce" name="go1.19" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="2b1f160dc626f711416b497cab193b6aa1858ef858a882961484c4dc924c803d" name="go1.19" arch="s390x">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="88fcf227d35f6169fd3ce6e932bc189721220ce88db1b650116cd6402a098198" name="go1.19" arch="src">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="0f7de36bfebb21186728e6e762f0e9043b1fa66b66f6db9c556636b5d93565b1" name="go1.19" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="f6615a7dbdfa4cdbcd1379cd76a69368374a5c3caf924137ba7c6faae23f14ac" name="go1.19-doc" arch="aarch64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="c0c2a59b5d2ae66d08d0d584d02e70b35344d54ac3eddbf88bf625dd1564f9c9" name="go1.19-doc" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="ade414494c56d7f7c52fe867dd8c7c676778a24ea3388ced6e25764501b945c5" name="go1.19-doc" arch="s390x">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="6556afcfaa44e3bbb9fff762135021460baffe51809f7975e7203ab1998d3e4e" name="go1.19-doc" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="94a392d49e4d5795c43c4d372e46618547132ca12492dd5591d3baf26b2f0ae6" name="go1.19-openssl" arch="aarch64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="cccd914f6d272db55521c55ae1160d1aaa8df52a882abb7e71dd7277b82dbf18" name="go1.19-openssl" arch="ppc64le">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="309c2d56791210d52b44700df86c6b5f23bec839b3be905c52c5300212344bf9" name="go1.19-openssl" arch="s390x">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="2b6473f0c00ea56accbc07b61478a44adacded99756b3b3497f4cea8ce5e3858" name="go1.19-openssl" arch="src">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="b9f3e2fd917ef5bde99120759bffd41fb3e3ee237f602e34d84790f0367227e4" name="go1.19-openssl" arch="x86_64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="86bccbf47903173a5a12f56b4416dedc605027b6a9d6e0fde79377bef5890d4b" name="go1.19-openssl-doc" arch="aarch64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="e5d2bcfb5c4e19ade901124baa38b91233b97abd2affd1818ea9e14f265cd29d" name="go1.19-openssl-doc" arch="ppc64le">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="89eb5f0b4bf5f5c6a9fb88c1ca41816825e6388de0c37dd373f70b918a3fcfc4" name="go1.19-openssl-doc" arch="s390x">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="72093f9a564fcb2a837ac63bbb10f37479ecaa8383c5fe9414bbca51557cc6e4" name="go1.19-openssl-doc" arch="x86_64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="6988abecd9f94728c4c80b5f709218e311dea6d397f015b4810055b0df4178d6" name="go1.19-openssl-race" arch="aarch64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="15b4c39867ea6cb9f7dcd0f586b05101896f8a96e33f2e965d836d8a6f6ce15f" name="go1.19-openssl-race" arch="ppc64le">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="52a7128d4433d485bedd80b0d61b422810fa34718d6c98551def10f0de6ef024" name="go1.19-openssl-race" arch="s390x">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="5576bf321d80fcd64b62f16982c42f1e4a95b8bd3c4b238905ab9485ec1625ea" name="go1.19-openssl-race" arch="x86_64">
  <version epoch="0" ver="1.19.10.1" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1671019200">- Initial package go1.19-openssl version 1.19.4.1 cut from the
  go1.19-openssl-fips branch at the revision tagged
  go1.19.4-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676548800">- Update to version 1.19.6.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.6-1-openssl-fips.
  * Update to Go 1.19.6
  * Add Crypto TestConfig and fix TLSv1.3 Crashesn
  * Add gating.yml</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Update to version 1.19.8.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.8-1-openssl-fips.
  * Update to Go 1.19.8</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.19.9.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-1-openssl-fips.
  * Update to Go 1.19.9</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.19.9.2 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.9-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.19.10.1 cut from the go1.19-openssl-fips
  branch at the revision tagged go1.19.10-1-openssl-fips.
  * Update to Go 1.19.10</changelog>
</package>
<package pkgid="48b636b4e9f96b54eac783448ff5d1c33a3e3eb18514bffb966815f4c5921d4c" name="go1.19-race" arch="aarch64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="bba280d5d6701b10b91ff2932cb1f9a1305816a03357ab562a2a0c0336878144" name="go1.19-race" arch="ppc64le">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="dbd6e0fe6505a5b8b69aca6868a823554d7d87f3f43e6d99d4bd74d990250d8b" name="go1.19-race" arch="s390x">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="219f89b2f4abae11bed71df19cbaed597e9c318f7230f174c9c6bbdd23c1c1a6" name="go1.19-race" arch="x86_64">
  <version epoch="0" ver="1.19.10" rel="150000.1.34.1"/>
  <changelog author="jkowalczyk@suse.com" date="1660046400">- Rebase gcc-go.patch onto upstream changes in go/src/make.bash and
  go/src/make.rc. Used for SLE-12 go bootstrap builds with gcc8.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- Bootstrap using go1.16 on SLE-15 and newer. go1.16 is
  bootstrapped using gcc-go 11 or 12. This allows dropping older
  versions of Go from Factory.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1661169600">- Define go_bootstrap_version go1.16 without suse_version checks
- Simplify conditional gcc_go_version 12 on Tumbleweed, 11 elsewhere
- Add _constraints for worker disk space 5G needed by SLE-15 x86_64
- SLE-12 s390x use bcond_without gccgo to bootstrap using gcc11go
  * Workaround for SLE-12 s390x build error while writing linker data:
    bad carrier sym for symbol crypto/internal/nistec.p256OrdMul.args_stackmap
    created by cmd/link/internal/ld.writeBlocks
  /usr/lib64/go/1.19/src/cmd/link/internal/ld/data.go:958</changelog>
  <changelog author="jkowalczyk@suse.com" date="1662465600">- go1.19.1 (released 2022-09-06) includes security fixes to the
  net/http and net/url packages, as well as bug fixes to the
  compiler, the go command, the pprof command, the linker, the
  runtime, and the crypto/tls and crypto/x509 packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-27664 CVE-2022-32190
  * go#54376 bsc#1203185 CVE-2022-27664 net/http: handle server errors after sending GOAWAY
  * go#54635 bsc#1203186 CVE-2022-32190 net/url: JoinPath doesn't strip relative path components in all circumstances
  * go#54736 cmd/go: cannot find package when importing dependencies with the unix build constraint
  * go#54734 cmd/go: git fetch errors dropped when producing pseudo-versions for commits
  * go#54726 cmd/compile: compile failed with "Value live at entry"
  * go#54697 cmd/compile: ICE at composite literal assignment with alignment &gt; PtrSize
  * go#54675 runtime: morestack_noctxt missing SPWRITE, causes "traceback stuck" assert
  * go#54665 runtime: segfault running ppc64/linux binaries with kernel 5.18
  * go#54660 cmd/go: go test -race does not set implicit race build tag
  * go#54643 crypto/tls: support ECDHE key exchanges when ec_point_formats is missing in ClientHello extension
  * go#54637 cmd/go: data race in TestScript
  * go#54633 cmd/go/internal/modfetch/codehost: racing writes to Origin fields
  * go#54629 cmd/compile: miscompilation of partially-overlapping array assignments
  * go#54420 cmd/pprof: graphviz node names are funny with generics
  * go#54406 cmd/link: trampoline insertion breaks DWARF Line Program Table output on Darwin/ARM64
  * go#54309 cmd/compile: internal compiler error: panic: runtime error: invalid memory address or nil pointer dereference
  * go#54295 crypto/x509: panics on invalid curve instead of returning error
  * go#54243 cmd/compile: internal compiler error when compiling code with unbound method of generic type
  * go#54239 misc/cgo: TestSignalForwardingExternal sometimes fails with wrong signal SIGINT
  * go#54235 cmd/compile: internal compiler error of atomic type and offsetof</changelog>
  <changelog author="jkowalczyk@suse.com" date="1664884800">- go1.19.2 (released 2022-10-04) includes security fixes to the
  archive/tar, net/http/httputil, and regexp packages, as well as
  bug fixes to the compiler, the linker, the runtime, and the
  go/types package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41715 CVE-2022-2879 CVE-2022-2880
  * go#55951 boo#1204023 security: fix CVE-2022-41715 regexp/syntax: limit memory used by parsing regexps
  * go#55926 boo#1204024 security: fix CVE-2022-2879 archive/tar: unbounded memory consumption when reading headers
  * go#55843 boo#1204025 security: fix CVE-2022-2880 net/http/httputil: ReverseProxy should not forward unparseable query parameters
  * go#55270 cmd/compile: internal compiler error: method Len on *uint8 not found
  * go#55152 cmd/compile: typebits.Set: invalid initial alignment: type Peer has alignment 8, but offset is 4
  * go#55149 go/types: no way to construct the signature of append(s, "string"...) via the API
  * go#55124 fatal error: bulkBarrierPreWrite: unaligned arguments (go 1.19.1, looks like regression)
  * go#55114 cmd/link: new darwin linker warning on -pagezero_size and -no_pie deprecation
  * go#54917 cmd/compile: Value live at entry
  * go#54764 runtime/cgo(.text): unknown symbol __stack_chk_fail_local in pcrel (regression in 1.19 when building for i686)</changelog>
  <changelog author="jkowalczyk@suse.com" date="1667304000">- go1.19.3 (released 2022-11-01) includes security fixes to the
  os/exec and syscall packages, as well as bug fixes to the
  compiler and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41716
  * go#56328 boo#1204941 security: fix CVE-2022-41716 syscall, os/exec: unsanitized NUL in environment variables
  * go#56309 runtime: "runtime·lock: lock count" fatal error when cgo is enabled
  * go#56168 cmd/compile: libFuzzer instrumentation fakePC overflow on 386 arch
  * go#56106 internal/fuzz: array literal initialization causes ICE "unhandled stmt ASOP" while fuzzing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1670328000">- go1.19.4 (released 2022-12-06) includes security fixes to the
  net/http and os packages, as well as bug fixes to the compiler,
  the runtime, and the crypto/x509, os/exec, and sync/atomic
  packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41717 CVE-2022-41720
  * go#57009 boo#1206135 security: fix CVE-2022-41717 net/http: limit canonical header cache by bytes, not entries
  * go#57006 boo#1206134 security: fix CVE-2022-41720 os, net/http: avoid escapes from os.DirFS and http.Dir on Windows
  * go#56752 runtime,cmd/compile: apparent memory corruption in compress/flate
  * go#56710 net: builders failing TestLookupDotsWithRemoteSource and TestLookupGoogleSRV due to missing host for _xmpp-server._tcp.google.com
  * go#56672 crypto/tls: boringcrypto restricts RSA key sizes to 2048 and 3072
  * go#56638 sync/atomic: atomic.Pointer[T] can be misused with type conversions.
  * go#56636 runtime: traceback stuck in runtime.systemstack
  * go#56557 cmd/compile: some x/sys versions no longer build due to "go:linkname must refer to declared function or variable"
  * go#56551 os/exec: Plan 9 build has been broken by a Windows security fix (also breaks 1.19.3 and 1.18.8)
  * go#56438 crypto/x509: respect GODEBUG changes during program lifetime
  * go#56397 runtime: on linux/PPC64, usleep computes incorrect tv_nsec parameter
  * go#56360 cmd/compile: panic: offset too large</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673352000">- go1.19.5 (released 2023-01-10) includes fixes to the compiler,
  the linker, and the crypto/x509, net/http, sync/atomic, and
  syscall packages.
  Refs boo#1200441 go1.19 release tracking
  * go#57706 Misc/cgo: backport needed for dlltool fix
  * go#57556 crypto/x509: re-allow duplicate attributes in CSRs
  * go#57444 cmd/link: need to handle new-style LoongArch relocs
  * go#57427 crypto/x509: Verify on macOS does not return typed errors
  * go#57345 cmd/compile: the loong64 intrinsic for CompareAndSwapUint32 function needs to sign extend its "old" argument.
  * go#57339 syscall, internal/poll: accept4-to-accept fallback removal broke Go code on Synology DSM 6.2 ARM devices
  * go#57214 os: TestLstat failure on Linux Aarch64
  * go#57212 reflect: sort.SliceStable sorts incorrectly on arm64 with less function created with reflect.MakeFunc and slice of sufficient length
  * go#57124 sync/atomic: allow linked lists of atomic.Pointer
  * go#57100 cmd/compile: non-retpoline-compatible errors
  * go#57058 cmd/go: remove test dependency on gopkg.in service
  * go#57055 cmd/go: TestScript/version_buildvcs_git_gpg (if enabled) fails on linux longtest builders
  * go#56983 runtime: failure in TestRaiseException on windows-amd64-2012
  * go#56834 cmd/link/internal/ppc64: too-far trampoline is reused
  * go#56770 cmd/compile: walkConvInterface produces broken IR
  * go#56744 cmd/compile: internal compiler error: missing typecheck
  * go#56712 net: reenable TestLookupDotsWithRemoteSource and TestLookupGoogleSRV with a different target
  * go#56154 net/http: bad handling of HEAD requests with a body</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.19.6 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the go command, the linker, the runtime,
  and the crypto/x509, net/http, and time packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57275 boo#1208269 security: fix CVE-2022-41722
  * go#58355 boo#1208270 security: fix CVE-2022-41723
  * go#58358 boo#1208271 security: fix CVE-2022-41724
  * go#58362 boo#1208272 security: fix CVE-2022-41725
  * go#56154 net/http: bad handling of HEAD requests with a body
  * go#57635 crypto/x509: TestBoringAllowCert failures
  * go#57812 runtime: performance regression due to bad instruction used in morestack_noctxt for ppc64 in CL 425396
  * go#58118 time: update zoneinfo_abbrs on Windows
  * go#58223 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58449 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.19.7 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the linker, the
  runtime, and the crypto/x509 and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24532
  * go#58719 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58441 runtime: some linkname signatures do not match
  * go#58502 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58535 runtime: long latency of sweep assists
  * go#58716 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58773 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58810 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- go1.19.8 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the linker, the
  runtime, and the time package.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59267 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59269 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59273 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59271 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58937 cmd/go: timeout on darwin-amd64-race builder
  * go#58939 runtime/pprof: TestLabelSystemstack due to sample with no location
  * go#58941 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#59050 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59058 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59074 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59219 runtime: crash on linux-ppc64le</changelog>
  <changelog author="mliska@suse.cz" date="1681387200">- Use gcc13 compiler for Tumbleweed.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473600">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473601">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1681473602">- Build subpackage go1.1x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.19.9 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/tls and syscall packages.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59811 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59813 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59815 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59063 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59158 cmd/compile: inlining function that references function literals generates bad code
  * go#59373 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59539 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59579 cmd/compile: incorrect inline function variable</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683115200">- Revert re-enable binary stripping and debuginfo boo#1210938.
  go1.19 and earlier store pre-compiled packages in $GOROOT/pkg as
  Go .a files which are not ar archives. These .a are incorrectly
  passed to strip by brp-15-strip-debug. strip incorrectly modifies
  Go .a files rendering them invalid. Some Go applications fail to
  build with "reference to nonexistent package" errors.
  Refs boo#1210938 boo#1211073
  * go1.19 and earlier store pre-compiled packages for the standard
    library as .a files under pkg/GOARCH[_{dynlink,race}].
  * Go emitted .a files are a Go specific format, not ar archives.
  * go1.10+ stores recently built packages in build cache GOCACHE.
    These are separate from the installed packages in $GOROOT/pkg.
  * Go build cache objects use a different file format than Go .a.
  * go1.20+ switches to the GOCACHE for both recently built
    packages and the installed packages in $GOROOT/pkg.
  * Current versions of readelf detect Go .a files correctly, e.g.:
    readelf -d /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a
    File: /usr/lib64/go/1.19/pkg/linux_amd64/bytes.a(__.PKGDEF       )
    readelf: Error: This is a GO binary file - try using 'go tool objdump' or 'go tool nm'
  * binutils strip as of 2.40 detects Go .a files correctly, but
    incorrectly modifies the .a files altering path resulting in
    "reference to nonexistent package" errors.
  * brp_check_suse/brp-15-strip-debug passes files to strip based
    primarily on the file extension including .a.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.19.10 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, and the runtime.
  Refs boo#1200441 go1.19 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60515 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60517 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60511 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60513 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#59974 cmd/compile: multiple memories live at block start
  * go#60000 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60457 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="20799c93b89a9a03c88009096d8c19f1304b668cca9569ec429116776c1ad79a" name="go1.20" arch="aarch64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="517b2fc9b3a933d64f7804c53bb22ab8a212e02876eb8c9d5fbb93c5047820ee" name="go1.20" arch="ppc64le">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="6375cb28dfed5cef665614fc961cbd2afefb4d731abc52f4fcdff6fe8265fe77" name="go1.20" arch="s390x">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="bf55c4c91a9f7d003deaae2fb9fd7e0e32a8c5ce1c131e4c03ae037f0b395b12" name="go1.20" arch="src">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="9d557e2c79eb8880306903f086012cbe1cf61db105cea98bb2b2b7b3b7d1949e" name="go1.20" arch="x86_64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="159d96dbbf695438b9cf391fca8c2c7117efcbea07c8f2fe78e71beaefa7888e" name="go1.20-doc" arch="aarch64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="8efb885eda306409914592c87e1ce79c0847fe72672bdf623b9fc32c92ca15f3" name="go1.20-doc" arch="ppc64le">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="94e67796f5e24bc0752a0d5cba673f663b52982f02b1712081afb642fd1e0d06" name="go1.20-doc" arch="s390x">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="648313c15da50f0a6c535bf3d76da0f059ca9ac389b0a43ef761446cd19803dd" name="go1.20-doc" arch="x86_64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="3afa49e202dcc8aba641f24972972c8b295e18951e5f8d3df30c642028b43ad0" name="go1.20-openssl" arch="aarch64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="ee602a04c2a76eb92eb7d208e174390c97d4be3f62fbb5bc1b6ea27bda70329f" name="go1.20-openssl" arch="ppc64le">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="a5f04480c379bc0cf47fbe55721491519b35abb925ec4211a697a61107b77893" name="go1.20-openssl" arch="s390x">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="65a85a91b13b62e87350fc8571d0a05cb34e8a706e87e41d15385fa5992d6bc3" name="go1.20-openssl" arch="src">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="6f2df4ccb1eeec8435e0ea2a9f434c5f48459caecd5bb2540c39ffe8d2a42fe9" name="go1.20-openssl" arch="x86_64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="2c9653df4f6c86738101e735f78f27b9cc913cc4deda0b48444e3f67e580bf6f" name="go1.20-openssl-doc" arch="aarch64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="9618927e02b4958e02ba3e598a6063b0bdaae3bc0d2c234d8c8787f32e86cce4" name="go1.20-openssl-doc" arch="ppc64le">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="0614369f8288a9edbadbe52643e87a0d9c8694b90a5e215a082ffdbfd6bee4eb" name="go1.20-openssl-doc" arch="s390x">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="392deca6703bbf695e9b575aa682b21eb8d985e9e7daa9c0468bb3ea17c7b454" name="go1.20-openssl-doc" arch="x86_64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="7d30334db0de7d98b6400c8dd7436e57e8d1181aa10d13c67926d10582c59386" name="go1.20-openssl-race" arch="aarch64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="5f149eff93a166db43741316ed9b4949a9ea48a25f7046b6ff6eab8041eee073" name="go1.20-openssl-race" arch="ppc64le">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="42483510cdf9a1f3f8a64d713cc908aae67d13dd6f7ea89599ab47d1de32babc" name="go1.20-openssl-race" arch="s390x">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="538c77dcb4266c6a10beb299f6da998ca5487cd75781fbb3d25d7c11783abd6a" name="go1.20-openssl-race" arch="x86_64">
  <version epoch="0" ver="1.20.5.2" rel="150000.1.5.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680696000">- Initial package go1.20-openssl version 1.20.3.1 cut from the
  go1.20-openssl-fips branch at the revision tagged
  go1.20.3-1-openssl-fips.
  Refs jsc#SLE-18320
  * Go upstream merged branch dev.boringcrypto in go1.19+.
  * In go1.x enable BoringCrypto via GOEXPERIMENT=boringcrypto.
  * In go1.x-openssl enable FIPS mode (or boring mode as the
    package is named) either via an environment variable
    GOLANG_FIPS=1 or by virtue of booting the host in FIPS mode.
  * When the operating system is operating in FIPS mode, Go
    applications which import crypto/tls/fipsonly limit operations
    to the FIPS ciphersuite.
  * go1.x-openssl is delivered as two large patches to go1.x
    applying necessary modifications from the golang-fips/go GitHub
    project for the Go crypto library to use OpenSSL as the
    external cryptographic library in a FIPS compliant way.
  * go1.x-openssl modifies the crypto/* packages to use OpenSSL for
    cryptographic operations.
  * go1.x-openssl uses dlopen() to call into OpenSSL.
  * SUSE RPM packaging introduces a fourth version digit go1.x.y.z
    corresponding to the golang-fips/go patchset tagged revision.
  * Patchset improvements can be updated independently of upstream
    Go maintenance releases.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684238400">- Update to version 1.20.4.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-1-openssl-fips.
  * Update to Go 1.20.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1684843200">- Update to version 1.20.4.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-2-openssl-fips.
  * Fix TestEncryptOAEP and TLS failures in FIPS mode</changelog>
  <changelog author="jkowalczyk@suse.com" date="1685102400">- Update to version 1.20.4.3 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.4-3-openssl-fips.
  * Update generated 001 patch file</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139200">- Update to version 1.20.5.1 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-1-openssl-fips.
  * Update to Go 1.20.5</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686139201">- Update to version 1.20.5.2 cut from the go1.20-openssl-fips
  branch at the revision tagged go1.20.5-2-openssl-fips.
  * Update generated 001 patch file</changelog>
</package>
<package pkgid="b6df0ceaefdc90ac0130a18cf26423bacd5f4d02878e75154ccc01a1cc2fb925" name="go1.20-race" arch="aarch64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="36dd04c11605d7b8e2dbdfda5c6f6191969dc660e67e311f43a2e2d704f2d9be" name="go1.20-race" arch="ppc64le">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="f887723716431d836581c51d7f8c32ac3f320ab6fab77a8d39572bc535194f3c" name="go1.20-race" arch="s390x">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="9ffe9d76e2943561695fe597748cf265f42ae4fda2f3546b84ba1e59161db62d" name="go1.20-race" arch="x86_64">
  <version epoch="0" ver="1.20.5" rel="150000.1.14.1"/>
  <changelog author="jkowalczyk@suse.com" date="1670500800">- go1.20rc1 (released 2022-12-08) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc1.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1672833600">- go1.20rc2 (released 2023-01-04) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc2.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1673524800">- go1.20rc3 (released 2023-01-12) is a release candidate version of
  go1.20 cut from the master branch at the revision tagged
  go1.20rc3.
  Refs boo#1206346 go1.20 release tracking</changelog>
  <changelog author="jkowalczyk@suse.com" date="1675252800">- go1.20 (released 2023-02-01) is a major release of Go.
  go1.20.x minor releases will be provided through February 2024.
  https://github.com/golang/go/wiki/Go-Release-Cycle
  go1.20 arrives six months after go1.19. Most of its changes are
  in the implementation of the toolchain, runtime, and libraries.
  As always, the release maintains the Go 1 promise of
  compatibility. We expect almost all Go programs to continue to
  compile and run as before.
  Refs boo#1206346 go1.20 release tracking
  Refs jsc#PED-1962
  * Go 1.20 includes four changes to the language
  * Language change: Go 1.17 added conversions from slice to an
    array pointer. Go 1.20 extends this to allow conversions from a
    slice to an array
  * Language change: The unsafe package defines three new functions
    SliceData, String, and StringData. Along with Go 1.17's Slice,
    these functions now provide the complete ability to construct
    and deconstruct slice and string values, without depending on
    their exact representation.
  * Language change: The specification now defines that struct
    values are compared one field at a time, considering fields in
    the order they appear in the struct type definition, and
    stopping at the first mismatch. The specification could
    previously have been read as if all fields needed to be
    compared beyond the first mismatch. Similarly, the
    specification now defines that array values are compared one
    element at a time, in increasing index order. In both cases,
    the difference affects whether certain comparisons must
    panic. Existing programs are unchanged: the new spec wording
    describes what the implementations have always done.
  * Language change: Comparable types (such as ordinary interfaces)
    may now satisfy comparable constraints, even if the type
    arguments are not strictly comparable (comparison may panic at
    runtime). This makes it possible to instantiate a type
    parameter constrained by comparable (e.g., a type parameter for
    a user-defined generic map key) with a non-strictly comparable
    type argument such as an interface type, or a composite type
    containing an interface type.
  * go command: The directory $GOROOT/pkg no longer stores
    pre-compiled package archives for the standard library: go
    install no longer writes them, the go build no longer checks
    for them, and the Go distribution no longer ships
    them. Instead, packages in the standard library are built as
    needed and cached in the build cache, just like packages
    outside GOROOT. This change reduces the size of the Go
    distribution and also avoids C toolchain skew for packages that
    use cgo. Refs jsc#PED-1962
  * go command: The implementation of go test -json has been
    improved to make it more robust. Programs that run go test
  - json do not need any updates. Programs that invoke go tool
    test2json directly should now run the test binary with
  - v=test2json (for example, go test -v=test2json or ./pkg.test
  - test.v=test2json) instead of plain -v.
  * go command: A related change to go test -json is the addition
    of an event with Action set to start at the beginning of each
    test program's execution. When running multiple tests using the
    go command, these start events are guaranteed to be emitted in
    the same order as the packages named on the command line.
  * go command: The go command now defines architecture feature
    build tags, such as amd64.v2, to allow selecting a package
    implementation file based on the presence or absence of a
    particular architecture feature. See go help buildconstraint
    for details.
  * go command: The go subcommands now accept -C &lt;dir&gt; to change
    directory to &lt;dir&gt; before performing the command, which may be
    useful for scripts that need to execute commands in multiple
    different modules.
  * go command: The go build and go test commands no longer accept
    the -i flag, which has been deprecated since Go 1.16.
  * go command: The go generate command now accepts -skip &lt;pattern&gt;
    to skip //go:generate directives matching &lt;pattern&gt;.
  * go command: The go test command now accepts -skip &lt;pattern&gt; to
    skip tests, subtests, or examples matching &lt;pattern&gt;.
  * go command: When the main module is located within GOPATH/src,
    go install no longer installs libraries for non-main packages
    to GOPATH/pkg, and go list no longer reports a Target field for
    such packages. (In module mode, compiled packages are stored in
    the build cache only, but a bug had caused the GOPATH install
    targets to unexpectedly remain in effect.)
  * go command: The go build, go install, and other build-related
    commands now support a -pgo flag that enables profile-guided
    optimization, which is described in more detail in the Compiler
    section below. The -pgo flag specifies the file path of the
    profile. Specifying -pgo=auto causes the go command to search
    for a file named default.pgo in the main package's directory
    and use it if present. This mode currently requires a single
    main package to be specified on the command line, but we plan
    to lift this restriction in a future release. Specifying
  - pgo=off turns off profile-guided optimization.
  * go command: The go build, go install, and other build-related
    commands now support a -cover flag that builds the specified
    target with code coverage instrumentation. This is described in
    more detail in the Cover section below.
  * go version: The go version -m command now supports reading more
    types of Go binaries, most notably, Windows DLLs built with go
    build -buildmode=c-shared and Linux binaries without execute
    permission.
  * Cgo: The go command now disables cgo by default on systems
    without a C toolchain. More specifically, when the CGO_ENABLED
    environment variable is unset, the CC environment variable is
    unset, and the default C compiler (typically clang or gcc) is
    not found in the path, CGO_ENABLED defaults to 0. As always,
    you can override the default by setting CGO_ENABLED explicitly.
    The most important effect of the default change is that when Go
    is installed on a system without a C compiler, it will now use
    pure Go builds for packages in the standard library that use
    cgo, instead of using pre-distributed package archives (which
    have been removed, as noted above) or attempting to use cgo and
    failing. This makes Go work better in some minimal container
    environments as well as on macOS, where pre-distributed package
    archives have not been used for cgo-based packages since Go
    1.16.
    The packages in the standard library that use cgo are net,
    os/user, and plugin. On macOS, the net and os/user packages
    have been rewritten not to use cgo: the same code is now used
    for cgo and non-cgo builds as well as cross-compiled builds. On
    Windows, the net and os/user packages have never used cgo. On
    other systems, builds with cgo disabled will use a pure Go
    version of these packages.
    On macOS, the race detector has been rewritten not to use cgo:
    race-detector-enabled programs can be built and run without
    Xcode. On Linux and other Unix systems, and on Windows, a host
    C toolchain is required to use the race detector.
  * go cover: Go 1.20 supports collecting code coverage profiles
    for programs (applications and integration tests), as opposed
    to just unit tests. To collect coverage data for a program,
    build it with go build's -cover flag, then run the resulting
    binary with the environment variable GOCOVERDIR set to an
    output directory for coverage profiles. See the 'coverage for
    integration tests' landing page for more on how to get
    started. For details on the design and implementation, see the
    proposal.
  * go vet: Improved detection of loop variable capture by nested
    functions. The vet tool now reports references to loop
    variables following a call to T.Parallel() within subtest
    function bodies. Such references may observe the value of the
    variable from a different iteration (typically causing test
    cases to be skipped) or an invalid state due to unsynchronized
    concurrent access.
  * go vet: The tool also detects reference mistakes in more
    places. Previously it would only consider the last statement
    of the loop body, but now it recursively inspects the last
    statements within if, switch, and select statements.
  * go vet: New diagnostic for incorrect time formats. The vet tool
    now reports use of the time format 2006-02-01 (yyyy-dd-mm) with
    Time.Format and time.Parse. This format does not appear in
    common date standards, but is frequently used by mistake when
    attempting to use the ISO 8601 date format (yyyy-mm-dd).
  * Runtime: Some of the garbage collector's internal data
    structures were reorganized to be both more space and CPU
    efficient. This change reduces memory overheads and improves
    overall CPU performance by up to 2%.
  * Runtime: The garbage collector behaves less erratically with
    respect to goroutine assists in some circumstances.
  * Runtime: Go 1.20 adds a new runtime/coverage package containing
    APIs for writing coverage profile data at runtime from
    long-running and/or server programs that do not terminate via
    os.Exit().
  * Compiler: Go 1.20 adds preview support for profile-guided
    optimization (PGO). PGO enables the toolchain to perform
    application- and workload-specific optimizations based on
    run-time profile information. Currently, the compiler supports
    pprof CPU profiles, which can be collected through usual means,
    such as the runtime/pprof or net/http/pprof packages. To enable
    PGO, pass the path of a pprof profile file via the -pgo flag to
    go build, as mentioned above. Go 1.20 uses PGO to more
    aggressively inline functions at hot call sites. Benchmarks for
    a representative set of Go programs show enabling
    profile-guided inlining optimization improves performance about
    3–4%. See the PGO user guide for detailed documentation. We
    plan to add more profile-guided optimizations in future
    releases. Note that profile-guided optimization is a preview,
    so please use it with appropriate caution.
  * Compiler: The Go 1.20 compiler upgraded its front-end to use a
    new way of handling the compiler's internal data, which fixes
    several generic-types issues and enables type declarations
    within generic functions and methods.
  * Compiler: The compiler now rejects anonymous interface cycles
    with a compiler error by default. These arise from tricky uses
    of embedded interfaces and have always had subtle correctness
    issues, yet we have no evidence that they're actually used in
    practice. Assuming no reports from users adversely affected by
    this change, we plan to update the language specification for
    Go 1.22 to formally disallow them so tools authors can stop
    supporting them too.
  * Compiler: Go 1.18 and 1.19 saw regressions in build speed,
    largely due to the addition of support for generics and
    follow-on work. Go 1.20 improves build speeds by up to 10%,
    bringing it back in line with Go 1.17. Relative to Go 1.19,
    generated code performance is also generally slightly improved.
  * Linker: On Linux, the linker now selects the dynamic
    interpreter for glibc or musl at link time.
  * Linker: On Windows, the Go linker now supports modern
    LLVM-based C toolchains.
  * Linker: Go 1.20 uses go: and type: prefixes for
    compiler-generated symbols rather than go. and type.. This
    avoids confusion for user packages whose name starts with
    go.. The debug/gosym package understands this new naming
    convention for binaries built with Go 1.20 and newer.
  * Bootstrap: When building a Go release from source and
    GOROOT_BOOTSTRAP is not set, previous versions of Go looked for
    a Go 1.4 or later bootstrap toolchain in the directory
    $HOME/go1.4 (%HOMEDRIVE%%HOMEPATH%\go1.4 on Windows). Go 1.18
    and Go 1.19 looked first for $HOME/go1.17 or $HOME/sdk/go1.17
    before falling back to $HOME/go1.4, in anticipation of
    requiring Go 1.17 for use when bootstrapping Go 1.20. Go 1.20
    does require a Go 1.17 release for bootstrapping, but we
    realized that we should adopt the latest point release of the
    bootstrap toolchain, so it requires Go 1.17.13. Go 1.20 looks
    for $HOME/go1.17.13 or $HOME/sdk/go1.17.13 before falling back
    to $HOME/go1.4 (to support systems that hard-coded the path
    $HOME/go1.4 but have installed a newer Go toolchain there). In
    the future, we plan to move the bootstrap toolchain forward
    approximately once a year, and in particular we expect that Go
    1.22 will require the final point release of Go 1.20 for
    bootstrap.
  * Library: Go 1.20 adds a new crypto/ecdh package to provide
    explicit support for Elliptic Curve Diffie-Hellman key
    exchanges over NIST curves and Curve25519. Programs should use
    crypto/ecdh instead of the lower-level functionality in
    crypto/elliptic for ECDH, and third-party modules for more
    advanced use cases.
  * Error handling: Go 1.20 expands support for error wrapping to
    permit an error to wrap multiple other errors.
  * Error handling: An error e can wrap more than one error by
    providing an Unwrap method that returns a []error.
  * Error handling: The errors.Is and errors.As functions have been
    updated to inspect multiply wrapped errors.
  * Error handling: The fmt.Errorf function now supports multiple
    occurrences of the %w format verb, which will cause it to
    return an error that wraps all of those error operands.
  * Error handling: The new function errors.Join returns an error
    wrapping a list of errors.
  * HTTP ResponseController: The new "net/http".ResponseController
    type provides access to extended per-request functionality not
    handled by the "net/http".ResponseWriter interface. The
    ResponseController type provides a clearer, more discoverable
    way to add per-handler controls. Two such controls also added
    in Go 1.20 are SetReadDeadline and SetWriteDeadline, which
    allow setting per-request read and write deadlines.
  * New ReverseProxy Rewrite hook: The httputil.ReverseProxy
    forwarding proxy includes a new Rewrite hook function,
    superseding the previous Director hook.
  * archive/tar: When the GODEBUG=tarinsecurepath=0 environment
    variable is set, Reader.Next method will now return the error
    ErrInsecurePath for an entry with a file name that is an
    absolute path, refers to a location outside the current
    directory, contains invalid characters, or (on Windows) is a
    reserved name such as NUL. A future version of Go may disable
    insecure paths by default.
  * archive/zip: When the GODEBUG=zipinsecurepath=0 environment
    variable is set, NewReader will now return the error
    ErrInsecurePath when opening an archive which contains any file
    name that is an absolute path, refers to a location outside the
    current directory, contains invalid characters, or (on Windows)
    is a reserved names such as NUL. A future version of Go may
    disable insecure paths by default.
  * archive/zip: Reading from a directory file that contains file
    data will now return an error. The zip specification does not
    permit directory files to contain file data, so this change
    only affects reading from invalid archives.
  * bytes: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * bytes: The new Clone function allocates a copy of a byte slice.
  * context: The new WithCancelCause function provides a way to
    cancel a context with a given error. That error can be
    retrieved by calling the new Cause function.
  * crypto/ecdsa: When using supported curves, all operations are
    now implemented in constant time. This led to an increase in
    CPU time between 5% and 30%, mostly affecting P-384 and P-521.
  * crypto/ecdsa: The new PrivateKey.ECDH method converts an
    ecdsa.PrivateKey to an ecdh.PrivateKey.
  * crypto/ed25519: The PrivateKey.Sign method and the
    VerifyWithOptions function now support signing pre-hashed
    messages with Ed25519ph, indicated by an Options.HashFunc that
    returns crypto.SHA512. They also now support Ed25519ctx and
    Ed25519ph with context, indicated by setting the new
    Options.Context field.
  * crypto/rsa: The new field OAEPOptions.MGFHash allows
    configuring the MGF1 hash separately for OAEP decryption.
  * crypto/rsa: crypto/rsa now uses a new, safer, constant-time
    backend. This causes a CPU runtime increase for decryption
    operations between approximately 15% (RSA-2048 on amd64) and
    45% (RSA-4096 on arm64), and more on 32-bit
    architectures. Encryption operations are approximately 20x
    slower than before (but still 5-10x faster than
    decryption). Performance is expected to improve in future
    releases. Programs must not modify or manually generate the
    fields of PrecomputedValues.
  * crypto/subtle: The new function XORBytes XORs two byte slices
    together.
  * crypto/tls: Parsed certificates are now shared across all
    clients actively using that certificate. The memory savings can
    be significant in programs that make many concurrent
    connections to a server or collection of servers sharing any
    part of their certificate chains.
  * crypto/tls: For a handshake failure due to a certificate
    verification failure, the TLS client and server now return an
    error of the new type CertificateVerificationError, which
    includes the presented certificates.
  * crypto/x509: ParsePKCS8PrivateKey and MarshalPKCS8PrivateKey
    now support keys of type *crypto/ecdh.PrivateKey.
    ParsePKIXPublicKey and MarshalPKIXPublicKey now support keys of
    type *crypto/ecdh.PublicKey. Parsing NIST curve keys still
    returns values of type *ecdsa.PublicKey and *ecdsa.PrivateKey.
    Use their new ECDH methods to convert to the crypto/ecdh types.
  * crypto/x509: The new SetFallbackRoots function allows a program
    to define a set of fallback root certificates in case an
    operating system verifier or standard platform root bundle is
    unavailable at runtime. It will most commonly be used with a
    new package, golang.org/x/crypto/x509roots/fallback, which will
    provide an up to date root bundle.
  * debug/elf: Attempts to read from a SHT_NOBITS section using
    Section.Data or the reader returned by Section.Open now return
    an error.
  * debug/elf: Additional R_LARCH_* constants are defined for use
    with LoongArch systems.
  * debug/elf: Additional R_PPC64_* constants are defined for use
    with PPC64 ELFv2 relocations.
  * debug/elf: The constant value for R_PPC64_SECTOFF_LO_DS is
    corrected, from 61 to 62.
  * debug/gosym: Due to a change of Go's symbol naming conventions,
    tools that process Go binaries should use Go 1.20's debug/gosym
    package to transparently handle both old and new binaries.
  * debug/pe: Additional IMAGE_FILE_MACHINE_RISCV* constants are
    defined for use with RISC-V systems.
  * encoding/binary: The ReadVarint and ReadUvarint functions will
    now return io.ErrUnexpectedEOF after reading a partial value,
    rather than io.EOF.
  * encoding/xml: The new Encoder.Close method can be used to check
    for unclosed elements when finished encoding.
  * encoding/xml: The decoder now rejects element and attribute
    names with more than one colon, such as &lt;a:b:c&gt;, as well as
    namespaces that resolve to an empty string, such as xmlns:a="".
  * encoding/xml: The decoder now rejects elements that use
    different namespace prefixes in the opening and closing tag,
    even if those prefixes both denote the same namespace.
  * errors: The new Join function returns an error wrapping a list
    of errors.
  * fmt: The Errorf function supports multiple occurrences of the
    %w format verb, returning an error that unwraps to the list of
    all arguments to %w.
  * fmt: The new FormatString function recovers the formatting
    directive corresponding to a State, which can be useful in
    Formatter. implementations.
  * go/ast: The new RangeStmt.Range field records the position of
    the range keyword in a range statement.
  * go/ast: The new File.FileStart and File.FileEnd fields record
    the position of the start and end of the entire source file.
  * go/token: The new FileSet.RemoveFile method removes a file from
    a FileSet. Long-running programs can use this to release memory
    associated with files they no longer need.
  * go/types: The new Satisfies function reports whether a type
    satisfies a constraint. This change aligns with the new
    language semantics that distinguish satisfying a constraint
    from implementing an interface.
  * io: The new OffsetWriter wraps an underlying WriterAt and
    provides Seek, Write, and WriteAt methods that adjust their
    effective file offset position by a fixed amount.
  * io/fs: The new error SkipAll terminates a WalkDir immediately
    but successfully.
  * math/big: The math/big package's wide scope and input-dependent
    timing make it ill-suited for implementing cryptography. The
    cryptography packages in the standard library no longer call
    non-trivial Int methods on attacker-controlled inputs. In the
    future, the determination of whether a bug in math/big is
    considered a security vulnerability will depend on its wider
    impact on the standard library.
  * math/rand: The math/rand package now automatically seeds the
    global random number generator (used by top-level functions
    like Float64 and Int) with a random value, and the top-level
    Seed function has been deprecated. Programs that need a
    reproducible sequence of random numbers should prefer to
    allocate their own random source, using
    rand.New(rand.NewSource(seed)).
  * math/rand: Programs that need the earlier consistent global
    seeding behavior can set GODEBUG=randautoseed=0 in their
    environment.
  * math/rand: The top-level Read function has been deprecated. In
    almost all cases, crypto/rand.Read is more appropriate.
  * mime: The ParseMediaType function now allows duplicate
    parameter names, so long as the values of the names are the
    same.
  * mime/multipart: Methods of the Reader type now wrap errors
    returned by the underlying io.Reader.
  * net: The LookupCNAME function now consistently returns the
    contents of a CNAME record when one exists. Previously on Unix
    systems and when using the pure Go resolver, LookupCNAME would
    return an error if a CNAME record referred to a name that with
    no A, AAAA, or CNAME record. This change modifies LookupCNAME
    to match the previous behavior on Windows, allowing LookupCNAME
    to succeed whenever a CNAME exists.
  * net: Interface.Flags now includes the new flag FlagRunning,
    indicating an operationally active interface. An interface
    which is administratively configured but not active (for
    example, because the network cable is not connected) will have
    FlagUp set but not FlagRunning.
  * net: The new Dialer.ControlContext field contains a callback
    function similar to the existing Dialer.Control hook, that
    additionally accepts the dial context as a parameter. Control
    is ignored when ControlContext is not nil.
  * net: The Go DNS resolver recognizes the trust-ad resolver
    option. When options trust-ad is set in resolv.conf, the Go
    resolver will set the AD bit in DNS queries. The resolver does
    not make use of the AD bit in responses.
  * net: DNS resolution will detect changes to /etc/nsswitch.conf
    and reload the file when it changes. Checks are made at most
    once every five seconds, matching the previous handling of
    /etc/hosts and /etc/resolv.conf.
  * net/http: The ResponseWriter.WriteHeader function now supports
    sending 1xx status codes.
  * net/http: The new Server.DisableGeneralOptionsHandler
    configuration setting allows disabling the default OPTIONS *
    handler.
  * net/http: The new Transport.OnProxyConnectResponse hook is
    called when a Transport receives an HTTP response from a proxy
    for a CONNECT request.
  * net/http: The HTTP server now accepts HEAD requests containing
    a body, rather than rejecting them as invalid.
  * net/http: HTTP/2 stream errors returned by net/http functions
    may be converted to a golang.org/x/net/http2.StreamError using
    errors.As.
  * net/http: Leading and trailing spaces are trimmed from cookie
    names, rather than being rejected as invalid. For example, a
    cookie setting of "name =value" is now accepted as setting the
    cookie "name".
  * net/netip: The new IPv6LinkLocalAllRouters and IPv6Loopback
    functions are the net/netip equivalents of net.IPv6loopback and
    net.IPv6linklocalallrouters.
  * os: On Windows, the name NUL is no longer treated as a special
    case in Mkdir and Stat.
  * os: On Windows, File.Stat now uses the file handle to retrieve
    attributes when the file is a directory. Previously it would
    use the path passed to Open, which may no longer be the file
    represented by the file handle if the file has been moved or
    replaced. This change modifies Open to open directories without
    the FILE_SHARE_DELETE access, which match the behavior of
    regular files.
  * os: On Windows, File.Seek now supports seeking to the beginning
    of a directory.
  * os/exec: The new Cmd fields Cancel and WaitDelay specify the
    behavior of the Cmd when its associated Context is canceled or
    its process exits with I/O pipes still held open by a child
    process.
  * path/filepath: The new error SkipAll terminates a Walk
    immediately but successfully.
  * path/filepath: The new IsLocal function reports whether a path
    is lexically local to a directory. For example, if IsLocal(p)
    is true, then Open(p) will refer to a file that is lexically
    within the subtree rooted at the current directory.
  * reflect: The new Value.Comparable and Value.Equal methods can
    be used to compare two Values for equality. Comparable reports
    whether Equal is a valid operation for a given Value receiver.
  * reflect: The new Value.Grow method extends a slice to guarantee
    space for another n elements.
  * reflect: The new Value.SetZero method sets a value to be the
    zero value for its type.
  * reflect: Go 1.18 introduced Value.SetIterKey and
    Value.SetIterValue methods. These are optimizations:
    v.SetIterKey(it) is meant to be equivalent to
    v.Set(it.Key()). The implementations incorrectly omitted a
    check for use of unexported fields that was present in the
    unoptimized forms. Go 1.20 corrects these methods to include
    the unexported field check.
  * regexp: Go 1.19.2 and Go 1.18.7 included a security fix to the
    regular expression parser, making it reject very large
    expressions that would consume too much memory. Because Go
    patch releases do not introduce new API, the parser returned
    syntax.ErrInternalError in this case. Go 1.20 adds a more
    specific error, syntax.ErrLarge, which the parser now returns
    instead.
  * runtime/cgo: Go 1.20 adds new Incomplete marker type. Code
    generated by cgo will use cgo.Incomplete to mark an incomplete
    C type.
  * runtime/metrics: Go 1.20 adds new supported metrics, including
    the current GOMAXPROCS setting (/sched/gomaxprocs:threads), the
    number of cgo calls executed (/cgo/go-to-c-calls:calls), total
    mutex block time (/sync/mutex/wait/total:seconds), and various
    measures of time spent in garbage collection.
  * runtime/metrics: Time-based histogram metrics are now less
    precise, but take up much less memory.
  * runtime/pprof: Mutex profile samples are now pre-scaled, fixing
    an issue where old mutex profile samples would be scaled
    incorrectly if the sampling rate changed during execution.
  * runtime/pprof: Profiles collected on Windows now include memory
    mapping information that fixes symbolization issues for
    position-independent binaries.
  * runtime/trace: The garbage collector's background sweeper now
    yields less frequently, resulting in many fewer extraneous
    events in execution traces.
  * strings: The new CutPrefix and CutSuffix functions are like
    TrimPrefix and TrimSuffix but also report whether the string
    was trimmed.
  * sync: The new Map methods Swap, CompareAndSwap, and
    CompareAndDelete allow existing map entries to be updated
    atomically.
  * syscall: On FreeBSD, compatibility shims needed for FreeBSD 11
    and earlier have been removed.
  * syscall: On Linux, additional CLONE_* constants are defined for
    use with the SysProcAttr.Cloneflags field.
  * syscall: On Linux, the new SysProcAttr.CgroupFD and
    SysProcAttr.UseCgroupFD fields provide a way to place a child
    process into a specific cgroup.
  * testing: The new method B.Elapsed reports the current elapsed
    time of the benchmark, which may be useful for calculating
    rates to report with ReportMetric.
  * time: The new time layout constants DateTime, DateOnly, and
    TimeOnly provide names for three of the most common layout
    strings used in a survey of public Go source code.
  * time: The new Time.Compare method compares two times.
  * time: Parse now ignores sub-nanosecond precision in its input,
    instead of reporting those digits as an error.
  * time: The Time.MarshalJSON method is now more strict about
    adherence to RFC 3339.
  * unicode/utf16: The new AppendRune function appends the UTF-16
    encoding of a given rune to a uint16 slice, analogous to
    utf8.AppendRune.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1676376000">- go1.20.1 (released 2023-02-14) includes security fixes to the
  crypto/tls, mime/multipart, net/http, and path/filepath packages,
  as well as bug fixes to the compiler, the go command, the linker,
  the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2022-41722 CVE-2022-41723 CVE-2022-41724 CVE-2022-41725
  * go#57276 boo#1208269 security: fix CVE-2022-41722 path/filepath: path traversal in filepath.Clean on Windows
  * go#58356 boo#1208270 security: fix CVE-2022-41723 net/http: avoid quadratic complexity in HPACK decoding
  * go#58359 boo#1208271 security: fix CVE-2022-41724 crypto/tls: large handshake records may cause panics
  * go#58363 boo#1208272 security: fix CVE-2022-41725 net/http, mime/multipart: denial of service from excessive resource consumption
  * go#58117 time: update zoneinfo_abbrs on Windows
  * go#58224 cmd/link: .go.buildinfo is gc'ed by --gc-sections
  * go#58309 cmd/compile/internal/pgo: Detect sample value position instead of hard-coding
  * go#58319 cmd/compile: constant overflows when assigned to package level var (Go 1.20 regression)
  * go#58335 cmd/compile: internal compiler error: panic: interface conversion: ir.Node is *ir.CompLitExpr, not *ir.Name
  * go#58413 cmd/compile: internal compiler error: Type.Elem UNION
  * go#58419 runtime: GOOS=ios fails Apple's app validation due to use of private API
  * go#58421 cmd/go/internal/test: stale flagdefs.go not detected by tests
  * go#58431 all: test failures with ETXTBSY
  * go#58450 cmd/go/internal/modfetch: TestCodeRepo/gopkg.in_natefinch_lumberjack.v2/latest failing</changelog>
  <changelog author="dmueller@suse.com" date="1676635200">- Improvements to go1.x packaging spec:
  * On Tumbleweed bootstrap with current default gcc13 and gccgo118
  * On SLE-12 aarch64 ppc64le ppc64 remove overrides to bootstrap
    using go1.x package (%bcond_without gccgo). This is no longer
    needed on current SLE-12:Update and removing will consolidate
    the build configurations used.
  * Change source URLs to go.dev as per Go upstream
  * On x86_64 export GOAMD64=v1 as per the current baseline.
    At this time forgo GOAMD64=v3 option for x86_64_v3 support.
  * On x86_64 %define go_amd64=v1 as current instruction baseline
  * In %check on x86_64 use value %go_amd64=v1 as GOAMD64=v1 to
    grep correct TSAN version is checked out from LLVM with new
    spelling for internal/amd64v1/race_linux.syso</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678190400">- go1.20.2 (released 2023-03-07) includes a security fix to the
  crypto/elliptic package, as well as bug fixes to the compiler,
  the covdata command, the linker, the runtime, and the
  crypto/ecdh, crypto/rsa, crypto/x509, os, and syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24532
  * go#58720 go#58647 boo#1209030 security: fix CVE-2023-24532 crypto/elliptic: specific unreduced P-256 scalars produce incorrect results
  * go#58427 cmd/covdata: short read on string table when merging coverage counters
  * go#58442 runtime: some linkname signatures do not match
  * go#58444 cmd/compile: inline static init cause compile time error
  * go#58467 cmd/compile: internal compiler error: '(*Tree[go.shape.int]).RemoveParent.func1': value .dict (nil) incorrectly live at entry
  * go#58498 crypto/ecdh: ECDH method doesn't check curve
  * go#58503 cmd/link: relocation truncated to fit: R_ARM_CALL against `runtime.duffcopy'
  * go#58505 crypto/internal/bigmod: flag amd64 assembly as noescape
  * go#58531 runtime: endless traceback when panic in generics funtion
  * go#58536 runtime: long latency of sweep assists
  * go#58624 syscall.Faccessat and os.LookPath regression in Go 1.20
  * go#58627 os: cmd/go gets error "copy_file_range: function not implemented"
  * go#58717 net: TestTCPSelfConnect failures due to unexpected connections
  * go#58774 syscall: Environ uses an invalid unsafe.Pointer conversion on Windows
  * go#58776 cmd/compile: ICE on method value involving imported anonymous interface
  * go#58793 crypto/x509: Incorrect documentation for ParsePKCS8PrivateKey
  * go#58811 crypto/x509: TestSystemVerify consistently failing</changelog>
  <changelog author="jkowalczyk@suse.com" date="1678363200">- Add subpackage go1.x-libstd for compiled shared object libstd.so.
  Refs jsc#PED-1962
  * Main go1.x package included libstd.so in previous versions
  * Split libstd.so into subpackage that can be installed standalone
  * Continues the slimming down of main go1.x package by 40 Mb
  * Experimental and not recommended for general use, Go currently has no ABI
  * Upstream Go has not committed to support buildmode=shared long-term
  * Do not use in packaging, build static single binaries (the default)
  * Upstream Go go1.x binary releases do not include libstd.so
  * go1.x Suggests go1.x-libstd so not installed by default Recommends
  * go1.x-libstd does not Require: go1.x so can install standalone
  * Provides go-libstd unversioned package name
  * Fix build step -buildmode=shared std to omit -linkshared
- Packaging improvements:
  * go1.x Suggests go1.x-doc so not installed by default Recommends
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609600">- Build subpackage go1.x-libstd compiled shared object libstd.so
  only on Tumbleweed at this time.
  Refs jsc#PED-1962</changelog>
  <changelog author="jkowalczyk@suse.com" date="1680609601">- go1.20.3 (released 2023-04-04) includes security fixes to the
  go/parser, html/template, mime/multipart, net/http, and
  net/textproto packages, as well as bug fixes to the compiler, the
  linker, the runtime, and the time package.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-24534 CVE-2023-24536 CVE-2023-24537 CVE-2023-24538
  * go#59268 go#58975 boo#1210127 security: fix CVE-2023-24534 net/http, net/textproto: denial of service from excessive memory allocation
  * go#59270 go#59153 boo#1210128 security: fix CVE-2023-24536 net/http, net/textproto, mime/multipart: denial of service from excessive resource consumption
  * go#59274 go#59180 boo#1210129 security: fix CVE-2023-24537 go/parser: infinite loop in parsing
  * go#59272 go#59234 boo#1210130 security: fix CVE-2023-24538 html/template: backticks not treated as string delimiters
  * go#58920 x/text: building as a plugin failure on darwin/arm64
  * go#58938 cmd/go: timeout on darwin-amd64-race builder
  * go#58942 internal/testpty: fails on some Linux machines due to incorrect error handling
  * go#58954 cmd/link: Incorrect symbol linked in darwin/arm64
  * go#59051 cmd/link: linker fails on linux/amd64 when gcc's lto options are used
  * go#59059 cmd/link/internal/arm: off-by-one error in trampoline phase call reachability calculation
  * go#59075 time: time zone lookup using extend string makes wrong start time for non-DST zones
  * go#59220 runtime: crash on linux-ppc64le
  * go#59236 cmd/compile: crypto/elliptic build error under -linkshared mode
  * go#59296 cmd/compile: unsafe.SliceData incoherent resuilt with nil argument</changelog>
  <changelog author="jkowalczyk@suse.com" date="1682683200">- Packaging improvements:
  * Re-enable binary stripping and debuginfo boo#1210938
  * go1.x Suggests go1.x-race do not install by default boo#1210963
  * Use Group: Development/Languages/Go instead of Other</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028800">- Packaging revert go1.x Suggests go1.x-race boo#1210963
  * Upstream go binary distributions do include race detector .syso
  * Default Recommends for subpackages is best suited in this case</changelog>
  <changelog author="jkowalczyk@suse.com" date="1683028801">- go1.20.4 (released 2023-05-02) includes three security fixes to
  the html/template package, as well as bug fixes to the compiler,
  the runtime, and the crypto/subtle, crypto/tls, net/http, and
  syscall packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29400 CVE-2023-24540 CVE-2023-24539
  * go#59812 go#59720 boo#1211029 security: fix CVE-2023-24539 html/template: improper sanitization of CSS values
  * go#59814 go#59721 boo#1211030 security: fix CVE-2023-24540 html/template: improper handling of JavaScript whitespace
  * go#59816 go#59722 boo#1211031 security: fix CVE-2023-29400 html/template: improper handling of empty HTML attributes
  * go#59064 runtime: automatically bump RLIMIT_NOFILE on Unix
  * go#59336 crypto/subtle: xor fails when run with race+purego
  * go#59374 cmd/compile: encoding/binary.PutUint16 sometimes doesn't write
  * go#59450 cmd/compile: internal compiler error: cannot call SetType(go.shape.int) on v (type int)
  * go#59468 cmd/compile: miscompilation in star-tex.org/x/cmd/star-tex
  * go#59469 net/http: FileServer no longer serves content for POST
  * go#59540 crypto/tls: TLSv1.3 connection fails with invalid PSK binder
  * go#59580 cmd/compile: incorrect inline function variable
  * go#59585 cmd/compile: Unified IR exports table is binary unstable in presence of generics
  * go#59637 go/internal/gcimporter: lookupGorootExport should use the go command from build.Default.GOROOT</changelog>
  <changelog author="jkowalczyk@suse.com" date="1686052800">- go1.20.5 (released 2023-06-06) includes four security fixes to
  the cmd/go and runtime packages, as well as bug fixes to the
  compiler, the go command, the runtime, and the crypto/rsa, net,
  and os packages.
  Refs boo#1206346 go1.20 release tracking
  CVE-2023-29402 CVE-2023-29403 CVE-2023-29404 CVE-2023-29405
  * go#60516 go#60167 boo#1212073 security: fix CVE-2023-29402 cmd/go: cgo code injection
  * go#60518 go#60272 boo#1212074 security: fix CVE-2023-29403 runtime: unexpected behavior of setuid/setgid binaries
  * go#60512 go#60305 boo#1212075 security: fix CVE-2023-29404 cmd/go: improper sanitization of LDFLAGS
  * go#60514 go#60306 boo#1212076 security: fix CVE-2023-29405 cmd/go: improper sanitization of LDFLAGS
  * go#58927 crypto/rsa: 4096 bit keys are not generated with BoringCrypto
  * go#59975 cmd/compile: multiple memories live at block start
  * go#60001 cmd/go: missing checksums for dependencies of go get arguments and tests of external dependencies
  * go#60217 os: Read of a device driver fails only with Go 1.20
  * go#60458 cmd/go: document GOROOT/bin/go PATH entry for go test and go generate</changelog>
</package>
<package pkgid="42aa63b6700cdd7d15f7005ebffe35f4ee5d96fb056504da418a860f40cae5be" name="golang-github-prometheus-prometheus" arch="aarch64">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="8cfaa6d3634db18e09cde832b6c9687289d6379a477d618feb525e74c4d9c818" name="golang-github-prometheus-prometheus" arch="ppc64le">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="8ce85e85dff3d93c6301a82c8e288105d3dd9caa1694d18d75b6ab1df7d868a0" name="golang-github-prometheus-prometheus" arch="s390x">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="dfe81fc8539f0b76ba33cf5844c39fd57c8664740ea38af21cbc33ab29fb79bf" name="golang-github-prometheus-prometheus" arch="src">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="32a3b96879342a376349a199d4e509b04835fe7701a54b95543c00fbb59b4dc0" name="golang-github-prometheus-prometheus" arch="x86_64">
  <version epoch="0" ver="2.37.6" rel="150100.4.17.1"/>
  <changelog author="witold.bedyk@suse.com" date="1580126400">- Update to Prometheus 2.11.2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1589371200">- Update Uyuni/SUSE Manager service discovery patch
  + Modified 0003-Add-Uyuni-service-discovery.patch:
  + Adapt service discovery to the new Uyuni API endpoints
  + Modified spec file: force golang 1.12 to fix build issues in SLE15SP2</changelog>
  <changelog author="jcavalheiro@suse.com" date="1591185600">- Update change log and spec file
  + Modified spec file: default to golang 1.14 to avoid "have choice" build issues in OBS.
  + Rebase and update patches for version 2.18.0
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Update to 2.18.0
  + Features
  * Tracing: Added experimental Jaeger support #7148
  + Changes
  * Federation: Only use local TSDB for federation (ignore remote read). #7096
  * Rules: `rule_evaluations_total` and `rule_evaluation_failures_total` have a `rule_group` label now. #7094
  + Enhancements
  * TSDB: Significantly reduce WAL size kept around after a block cut. #7098
  * Discovery: Add `architecture` meta label for EC2. #7000
  + Bug fixes
  * UI: Fixed wrong MinTime reported by /status. #7182
  * React UI: Fixed multiselect legend on OSX. #6880
  * Remote Write: Fixed blocked resharding edge case. #7122
  * Remote Write: Fixed remote write not updating on relabel configs change. #7073
- Changes from 2.17.2
  + Bug fixes
  * Federation: Register federation metrics #7081
  * PromQL: Fix panic in parser error handling #7132
  * Rules: Fix reloads hanging when deleting a rule group that is being evaluated #7138
  * TSDB: Fix a memory leak when prometheus starts with an empty TSDB WAL #7135
  * TSDB: Make isolation more robust to panics in web handlers #7129 #7136
- Changes from 2.17.1
  + Bug fixes
  * TSDB: Fix query performance regression that increased memory and CPU usage #7051
- Changes from 2.17.0
  + Features
  * TSDB: Support isolation #6841
  * This release implements isolation in TSDB. API queries and recording rules are
    guaranteed to only see full scrapes and full recording rules. This comes with a
    certain overhead in resource usage. Depending on the situation, there might be
    some increase in memory usage, CPU usage, or query latency.
  + Enhancements
  * PromQL: Allow more keywords as metric names #6933
  * React UI: Add normalization of localhost URLs in targets page #6794
  * Remote read: Read from remote storage concurrently #6770
  * Rules: Mark deleted rule series as stale after a reload #6745
  * Scrape: Log scrape append failures as debug rather than warn #6852
  * TSDB: Improve query performance for queries that partially hit the head #6676
  * Consul SD: Expose service health as meta label #5313
  * EC2 SD: Expose EC2 instance lifecycle as meta label #6914
  * Kubernetes SD: Expose service type as meta label for K8s service role #6684
  * Kubernetes SD: Expose label_selector and field_selector #6807
  * Openstack SD: Expose hypervisor id as meta label #6962
  + Bug fixes
  * PromQL: Do not escape HTML-like chars in query log #6834 #6795
  * React UI: Fix data table matrix values #6896
  * React UI: Fix new targets page not loading when using non-ASCII characters #6892
  * Remote read: Fix duplication of metrics read from remote storage with external labels #6967 #7018
  * Remote write: Register WAL watcher and live reader metrics for all remotes, not just the first one #6998
  * Scrape: Prevent removal of metric names upon relabeling #6891
  * Scrape: Fix 'superfluous response.WriteHeader call' errors when scrape fails under some circonstances #6986
  * Scrape: Fix crash when reloads are separated by two scrape intervals #7011
- Changes from 2.16.0
  + Features
  * React UI: Support local timezone on /graph #6692
  * PromQL: add absent_over_time query function #6490
  * Adding optional logging of queries to their own file #6520
  + Enhancements
  * React UI: Add support for rules page and "Xs ago" duration displays #6503
  * React UI: alerts page, replace filtering togglers tabs with checkboxes #6543
  * TSDB: Export metric for WAL write errors #6647
  * TSDB: Improve query performance for queries that only touch the most recent 2h of data. #6651
  * PromQL: Refactoring in parser errors to improve error messages #6634
  * PromQL: Support trailing commas in grouping opts #6480
  * Scrape: Reduce memory usage on reloads by reusing scrape cache #6670
  * Scrape: Add metrics to track bytes and entries in the metadata cache #6675
  * promtool: Add support for line-column numbers for invalid rules output #6533
  * Avoid restarting rule groups when it is unnecessary #6450
  + Bug fixes
  * React UI: Send cookies on fetch() on older browsers #6553
  * React UI: adopt grafana flot fix for stacked graphs #6603
  * React UI: broken graph page browser history so that back button works as expected #6659
  * TSDB: ensure compactionsSkipped metric is registered, and log proper error if one is returned from head.Init #6616
  * TSDB: return an error on ingesting series with duplicate labels #6664
  * PromQL: Fix unary operator precedence #6579
  * PromQL: Respect query.timeout even when we reach query.max-concurrency #6712
  * PromQL: Fix string and parentheses handling in engine, which affected React UI #6612
  * PromQL: Remove output labels returned by absent() if they are produced by multiple identical label matchers #6493
  * Scrape: Validate that OpenMetrics input ends with `# EOF` #6505
  * Remote read: return the correct error if configs can't be marshal'd to JSON #6622
  * Remote write: Make remote client `Store` use passed context, which can affect shutdown timing #6673
  * Remote write: Improve sharding calculation in cases where we would always be consistently behind by tracking pendingSamples #6511
  * Ensure prometheus_rule_group metrics are deleted when a rule group is removed #6693
- Changes from 2.15.2
  + Bug fixes
  * TSDB: Fixed support for TSDB blocks built with Prometheus before 2.1.0. #6564
  * TSDB: Fixed block compaction issues on Windows. #6547
- Changes from 2.15.1
  + Bug fixes
  * TSDB: Fixed race on concurrent queries against same data. #6512
- Changes from 2.15.0
  + Features
  * API: Added new endpoint for exposing per metric metadata `/metadata`. #6420 #6442
  + Changes
  * Discovery: Removed `prometheus_sd_kubernetes_cache_*` metrics. Additionally `prometheus_sd_kubernetes_workqueue_latency_seconds` and `prometheus_sd_kubernetes_workqueue_work_duration_seconds` metrics now show correct values in seconds. #6393
  * Remote write: Changed `query` label on `prometheus_remote_storage_*` metrics to `remote_name` and `url`. #6043
  + Enhancements
  * TSDB: Significantly reduced memory footprint of loaded TSDB blocks. #6418 #6461
  * TSDB: Significantly optimized what we buffer during compaction which should result in lower memory footprint during compaction. #6422 #6452 #6468 #6475
  * TSDB: Improve replay latency. #6230
  * TSDB: WAL size is now used for size based retention calculation. #5886
  * Remote read: Added query grouping and range hints to the remote read request #6401
  * Remote write: Added `prometheus_remote_storage_sent_bytes_total` counter per queue. #6344
  * promql: Improved PromQL parser performance. #6356
  * React UI: Implemented missing pages like `/targets` #6276, TSDB status page #6281 #6267 and many other fixes and performance improvements.
  * promql: Prometheus now accepts spaces between time range and square bracket. e.g `[ 5m]` #6065
  + Bug fixes
  * Config: Fixed alertmanager configuration to not miss targets when configurations are similar. #6455
  * Remote write: Value of `prometheus_remote_storage_shards_desired` gauge shows raw value of desired shards and it's updated correctly. #6378
  * Rules: Prometheus now fails the evaluation of rules and alerts where metric results collide with labels specified in `labels` field. #6469
  * API: Targets Metadata API `/targets/metadata` now accepts empty `match_targets` parameter as in the spec. #6303
- Changes from 2.14.0
  + Features
  * API: `/api/v1/status/runtimeinfo` and `/api/v1/status/buildinfo` endpoints added for use by the React UI. #6243
  * React UI: implement the new experimental React based UI. #5694 and many more
  * Can be found by under `/new`.
  * Not all pages are implemented yet.
  * Status: Cardinality statistics added to the Runtime &amp; Build Information page. #6125
  + Enhancements
  * Remote write: fix delays in remote write after a compaction. #6021
  * UI: Alerts can be filtered by state. #5758
  + Bug fixes
  * Ensure warnings from the API are escaped. #6279
  * API: lifecycle endpoints return 403 when not enabled. #6057
  * Build: Fix Solaris build. #6149
  * Promtool: Remove false duplicate rule warnings when checking rule files with alerts. #6270
  * Remote write: restore use of deduplicating logger in remote write. #6113
  * Remote write: do not reshard when unable to send samples. #6111
  * Service discovery: errors are no longer logged on context cancellation. #6116, #6133
  * UI: handle null response from API properly. #6071
- Changes from 2.13.1
  + Bug fixes
  * Fix panic in ARM builds of Prometheus. #6110
  * promql: fix potential panic in the query logger. #6094
  * Multiple errors of http: superfluous response.WriteHeader call in the logs. #6145
- Changes from 2.13.0
  + Enhancements
  * Metrics: renamed prometheus_sd_configs_failed_total to prometheus_sd_failed_configs and changed to Gauge #5254
  * Include the tsdb tool in builds. #6089
  * Service discovery: add new node address types for kubernetes. #5902
  * UI: show warnings if query have returned some warnings. #5964
  * Remote write: reduce memory usage of the series cache. #5849
  * Remote read: use remote read streaming to reduce memory usage. #5703
  * Metrics: added metrics for remote write max/min/desired shards to queue manager. #5787
  * Promtool: show the warnings during label query. #5924
  * Promtool: improve error messages when parsing bad rules. #5965
  * Promtool: more promlint rules. #5515
  + Bug fixes
  * UI: Fix a Stored DOM XSS vulnerability with query history [CVE-2019-10215](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-10215). #6098
  * Promtool: fix recording inconsistency due to duplicate labels. #6026
  * UI: fixes service-discovery view when accessed from unhealthy targets. #5915
  * Metrics format: OpenMetrics parser crashes on short input. #5939
  * UI: avoid truncated Y-axis values. #6014
- Changes from 2.12.0
  + Features
  * Track currently active PromQL queries in a log file. #5794
  * Enable and provide binaries for `mips64` / `mips64le` architectures. #5792
  + Enhancements
  * Improve responsiveness of targets web UI and API endpoint. #5740
  * Improve remote write desired shards calculation. #5763
  * Flush TSDB pages more precisely. tsdb#660
  * Add `prometheus_tsdb_retention_limit_bytes` metric. tsdb#667
  * Add logging during TSDB WAL replay on startup. tsdb#662
  * Improve TSDB memory usage. tsdb#653, tsdb#643, tsdb#654, tsdb#642, tsdb#627
  + Bug fixes
  * Check for duplicate label names in remote read. #5829
  * Mark deleted rules' series as stale on next evaluation. #5759
  * Fix JavaScript error when showing warning about out-of-sync server time. #5833
  * Fix `promtool test rules` panic when providing empty `exp_labels`. #5774
  * Only check last directory when discovering checkpoint number. #5756
  * Fix error propagation in WAL watcher helper functions. #5741
  * Correctly handle empty labels from alert templates. #5845</changelog>
  <changelog author="witold.bedyk@suse.com" date="1596196800">- Update 0003-Add-Uyuni-service-discovery.patch:
  + Add support for Prometheus exporters proxy</changelog>
  <changelog author="pseidensal@suse.com" date="1598875200">- Update package with changes from `server:monitoring` bsc#1175478
  Left out removal of firewalld related configuration files as SLE-15-SP1's
  `firewalld` package does not contain prometheus configuration yet.</changelog>
  <changelog author="stefano.torresi@suse.com" date="1604923200">- Update to upstream version 2.22.1
- Update packaging
  * Remove systemd and shadow hard requirements
  * use systemd-sysusers to configure the user in a dedicated 'system-user-prometheus' subpackage
  * add 'prometheus' package alias</changelog>
  <changelog author="witold.bedyk@suse.com" date="1615291200">- Uyuni: `hostname` label is now set to FQDN instead of IP
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1620129600">- Add tarball with vendor modules and web assets
- Uyuni: Read formula data from exporters map
- Uyuni: Add support for TLS targets
  + Changed:
  * 0003-Add-Uyuni-service-discovery.patch
  * 0002-Default-settings.patch Changed
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.26.0
  + Changes
  * Alerting: Using Alertmanager v2 API by default. #8626
  * Prometheus/Promtool: Binaries are now printing help and usage to stdout instead of stderr. #8542
  + Features
  * Remote: Add support for AWS SigV4 auth method for remote_write. #8509
  * PromQL: Allow negative offsets. Behind --enable-feature=promql-negative-offset flag. #8487
  * UI: Add advanced auto-completion, syntax highlighting and linting to graph page query input. #8634
  + Enhancements
  * PromQL: Add last_over_time, sgn, clamp functions. #8457
  * Scrape: Add support for specifying type of Authorization header credentials with Bearer by default. #8512
  * Scrape: Add follow_redirects option to scrape configuration. #8546
  * Remote: Allow retries on HTTP 429 response code for remote_write. #8237 #8477
  * Remote: Allow configuring custom headers for remote_read. #8516
  * UI: Hitting Enter now triggers new query. #8581
  * UI: Better handling of long rule and names on the /rules and /targets pages. #8608 #8609
  * UI: Add collapse/expand all button on the /targets page. #8486
- Upgrade to upstream version 2.25.0
  + Features
  * Include a new `--enable-feature=` flag that enables experimental features.
  + Enhancements
  * Add optional name property to testgroup for better test failure output. #8440
  * Add warnings into React Panel on the Graph page. #8427
  * TSDB: Increase the number of buckets for the compaction duration metric. #8342
  * Remote: Allow passing along custom remote_write HTTP headers. #8416
  * Mixins: Scope grafana configuration. #8332
  * Kubernetes SD: Add endpoint labels metadata. #8273
  * UI: Expose total number of label pairs in head in TSDB stats page. #8343
  * TSDB: Reload blocks every minute, to detect new blocks and enforce retention more often. #8343
  + Bug fixes
  * API: Fix global URL when external address has no port. #8359
  * Deprecate unused flag --alertmanager.timeout. #8407
- Upgrade to upstream version 2.24.1
  + Enhancements
  * Cache basic authentication results to significantly improve performance of HTTP endpoints.
- Upgrade to upstream version 2.24.0
  + Features
  * Add TLS and basic authentication to HTTP endpoints. #8316
  * promtool: Add check web-config subcommand to check web config files. #8319
  * promtool: Add tsdb create-blocks-from openmetrics subcommand to backfill metrics data from an OpenMetrics file. #8084
  + Enhancements
  * HTTP API: Fast-fail queries with only empty matchers. #8288
  * HTTP API: Support matchers for labels API. #8301
  * promtool: Improve checking of URLs passed on the command line. #7956
  * SD: Expose IPv6 as a label in EC2 SD. #7086
  * SD: Reuse EC2 client, reducing frequency of requesting credentials. #8311
  * TSDB: Add logging when compaction takes more than the block time range. #8151
  * TSDB: Avoid unnecessary GC runs after compaction. #8276
- Upgrade to upstream version 2.23.0
  + Changes
  * UI: Make the React UI default. #8142
  * Remote write: The following metrics were removed/renamed in remote write. #6815
    &gt; prometheus_remote_storage_succeeded_samples_total was removed and prometheus_remote_storage_samples_total was introduced for all the samples attempted to send.
    &gt; prometheus_remote_storage_sent_bytes_total was removed and replaced with prometheus_remote_storage_samples_bytes_total and prometheus_remote_storage_metadata_bytes_total.
    &gt; prometheus_remote_storage_failed_samples_total -&gt; prometheus_remote_storage_samples_failed_total .
    &gt; prometheus_remote_storage_retried_samples_total -&gt; prometheus_remote_storage_samples_retried_total.
    &gt; prometheus_remote_storage_dropped_samples_total -&gt; prometheus_remote_storage_samples_dropped_total.
    &gt; prometheus_remote_storage_pending_samples -&gt; prometheus_remote_storage_samples_pending.
  * Remote: Do not collect non-initialized timestamp metrics. #8060
  + Enhancements
  * Remote write: Added a metric prometheus_remote_storage_max_samples_per_send for remote write. #8102
  * TSDB: Make the snapshot directory name always the same length. #8138
  * TSDB: Create a checkpoint only once at the end of all head compactions. #8067
  * TSDB: Avoid Series API from hitting the chunks. #8050
  * TSDB: Cache label name and last value when adding series during compactions making compactions faster. #8192
  * PromQL: Improved performance of Hash method making queries a bit faster. #8025
  * promtool: tsdb list now prints block sizes. #7993
  * promtool: Calculate mint and maxt per test avoiding unnecessary calculations. #8096
  * SD: Add filtering of services to Docker Swarm SD. #8074</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1621425600">- Refresh patches
  + Changed:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
  * 0003-Add-Uyuni-service-discovery.patch
- Upgrade to upstream version 2.27.1 (jsc#SLE-18254)
  + Bugfix:
  * SECURITY: Fix arbitrary redirects under the /new endpoint (CVE-2021-29622, bsc#1186242)
- Upgrade to upstream version 2.27.0
  + Features:
  * Promtool: Retroactive rule evaluation functionality. #7675
  * Configuration: Environment variable expansion for external labels. Behind --enable-feature=expand-external-labels flag. #8649
  * TSDB: Add a flag(--storage.tsdb.max-block-chunk-segment-size) to control the max chunks file size of the blocks for small Prometheus instances. #8478
  * UI: Add a dark theme. #8604
  * AWS Lightsail Discovery: Add AWS Lightsail Discovery. #8693
  * Docker Discovery: Add Docker Service Discovery. #8629
  * OAuth: Allow OAuth 2.0 to be used anywhere an HTTP client is used. #8761
  * Remote Write: Send exemplars via remote write. Experimental and disabled by default. #8296
  + Enhancements:
  * Digital Ocean Discovery: Add __meta_digitalocean_vpc label. #8642
  * Scaleway Discovery: Read Scaleway secret from a file. #8643
  * Scrape: Add configurable limits for label size and count. #8777
  * UI: Add 16w and 26w time range steps. #8656
  * Templating: Enable parsing strings in humanize functions. #8682
  + Bugfixes:
  * UI: Provide errors instead of blank page on TSDB Status Page. #8654 #8659
  * TSDB: Do not panic when writing very large records to the WAL. #8790
  * TSDB: Avoid panic when mmaped memory is referenced after the file is closed. #8723
  * Scaleway Discovery: Fix nil pointer dereference. #8737
  * Consul Discovery: Restart no longer required after config update with no targets. #8766</changelog>
  <changelog author="witold.bedyk@suse.com" date="1625745600">- Provide and reload firewalld configuration only for:
  + openSUSE Leap 15.0, 15.1, 15.2
  + SUSE SLE15, SLE15 SP1, SLE15 SP2</changelog>
  <changelog author="jsegitz@suse.com" date="1632139200">- Added hardening to systemd service(s) (bsc#1181400). Modified:
  * prometheus.service</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642593600">- Updated patches:
  + Changed:
  * 0002-Default-settings.patch
  + Removed:
  * 0003-Add-Uyuni-service-discovery.patch
- Use obs-service-go_modules
- Upgrade to upstream version 2.32.1 (jsc#SLE-22863)
  + Bugfixes:
  * Scrape: Fix reporting metrics when sample limit is reached
    during the report. #9996
  * Scrape: Ensure that scrape interval and scrape timeout are
    always set. #10023
  * TSDB: Expose and fix bug in iterators' Seek() method. #10030
- Upgrade to upstream version 2.32.0
  + Change:
  * remote-write: Change default max retry time from 100ms to
    5 seconds. #9634
  + Features:
  * Agent: New mode of operation optimized for remote-write only
    scenarios, without local storage.
  * Promtool: Add promtool check service-discovery command. #8970
  + Enhancements:
  * Promtool: Improve test output. #8064
  * Promtool: Use kahan summation for better numerical stability.
  * Remote-write: Reuse memory for marshalling. #9412
  * Scrape: Add scrape_body_size_bytes scrape metric behind the
  - -enable-feature=extra-scrape-metrics flag. #9569
  * TSDB: Add windows arm64 support. #9703
  * TSDB: Optimize query by skipping unneeded sorting in TSDB.
  * Templates: Support int and uint as datatypes for template
    formatting. #9680
  * UI: Prefer rate over rad, delta over deg, and count over cos
    in autocomplete. #9688
  + Bugfixes:
  * TSDB: Add more size checks when writing individual sections
    in the index. #9710
  * PromQL: Make deriv() return zero values for constant series.
  * TSDB: Fix panic when checkpoint directory is empty. #9687
  * TSDB: Fix panic, out of order chunks, and race warning during
    WAL replay. #9856
  * UI: Correctly render links for targets with IPv6 addresses
    that contain a Zone ID. #9853
  * Promtool: Fix checking of authorization.credentials_file and
    bearer_token_file fields. #9883
  * Uyuni SD: Fix null pointer exception during initialization.
  * TSDB: Fix queries after a failed snapshot replay. #9980
- Upgrade to upstream version 2.31.1
  + Bugfix:
  * SD: Fix a panic when the experimental discovery manager
    receives targets during a reload. #9656
- Upgrade to upstream version 2.31.0
  + Change:
  * UI: Remove standard PromQL editor in favour of the
    codemirror-based editor. #9452
  + Features:
  * PromQL: Add trigonometric functions and atan2 binary
    operator. #9239 #9248 #9515
  * Remote: Add support for exemplar in the remote write receiver
    endpoint. #9319 #9414
  * SD: Add PuppetDB service discovery. #8883
  * SD: Add Uyuni service discovery. #8190
  * Web: Add support for security-related HTTP headers. #9546
  + Enhancements:
  * Azure SD: Add proxy_url, follow_redirects, tls_config. #9267
  * Backfill: Add --max-block-duration in promtool
    create-blocks-from rules. #9511
  * Config: Print human-readable sizes with unit instead of raw
    numbers. #9361
  * HTTP: Re-enable HTTP/2. #9398
  * Kubernetes SD: Warn user if number of endpoints exceeds
    limit. #9467
  * OAuth2: Add TLS configuration to token requests. #9550
  * PromQL: Several optimizations. #9365 #9360 #9362 #9552
  * PromQL: Make aggregations deterministic in instant queries.
  * Rules: Add the ability to limit number of alerts or series.
  * SD: Experimental discovery manager to avoid restarts upon
    reload.
  * UI: Debounce timerange setting changes. #9359
  + Bugfixes:
  * Backfill: Apply rule labels after query labels. #9421
  * Scrape: Resolve conflicts between multiple exported label
    prefixes. #9479 #9518
  * Scrape: Restart scrape loops when __scrape_interval__ is
    changed. #9551
  * TSDB: Fix memory leak in samples deletion. #9151
  * UI: Use consistent margin-bottom for all alert kinds. #9318
- Upgrade to upstream version 2.30.3
  + Bugfixes:
  * TSDB: Fix panic on failed snapshot replay. #9438
  * TSDB: Don't fail snapshot replay with exemplar storage
    disabled when the snapshot contains exemplars. #9438
- Upgrade to upstream version 2.30.2
  + Bugfix:
  * TSDB: Don't error on overlapping m-mapped chunks during WAL
    replay. #9381
- Upgrade to upstream version 2.30.1
  + Enhancements:
  * Remote Write: Redact remote write URL when used for metric
    label. #9383
  * UI: Redact remote write URL and proxy URL passwords in the
    /config page. #9408
  + Bugfixes:
  * promtool rules backfill: Prevent creation of data before the
    start time. #9339
  * promtool rules backfill: Do not query after the end time.
  * Azure SD: Fix panic when no computername is set. #9387
- Upgrade to upstream version 2.30.0
  + Features:
  * experimental TSDB: Snapshot in-memory chunks on shutdown for
    faster restarts. #7229
  * experimental Scrape: Configure scrape interval and scrape
    timeout via relabeling using __scrape_interval__ and
    __scrape_timeout__ labels respectively. #8911
  * Scrape: Add scrape_timeout_seconds and scrape_sample_limit
    metric. #9247 #9295
  + Enhancements:
  * Scrape: Add --scrape.timestamp-tolerance flag to adjust
    scrape timestamp tolerance when enabled via
  - -scrape.adjust-timestamps. #9283
  * Remote Write: Improve throughput when sending exemplars.
  * TSDB: Optimise WAL loading by removing extra map and caching
    min-time #9160
  * promtool: Speed up checking for duplicate rules. #9262/#9306
  * Scrape: Reduce allocations when parsing the metrics. #9299
  * docker_sd: Support host network mode #9125
  + Bugfixes:
  * Exemplars: Fix panic when resizing exemplar storage from 0 to
    a non-zero size. #9286
  * TSDB: Correctly decrement
    prometheus_tsdb_head_active_appenders when the append has no
    samples. #9230
  * promtool rules backfill: Return 1 if backfill was
    unsuccessful. #9303
  * promtool rules backfill: Avoid creation of overlapping
    blocks. #9324
  * config: Fix a panic when reloading configuration with a null
    relabel action. #9224
- Upgrade to upstream version 2.29.2
  + Bugfixes:
  * Fix Kubernetes SD failing to discover Ingress in
    Kubernetes v1.22. #9205
  * Fix data race in loading write-ahead-log (WAL). #9259
- Upgrade to upstream version 2.29.1
  + Bugfixes:
  * TSDB: align atomically accessed int64 to prevent panic in
    32-bit archs. #9192
- Upgrade to upstream version 2.29.0
  + Changes:
  * Promote --storage.tsdb.allow-overlapping-blocks flag to
    stable. #9117
  * Promote --storage.tsdb.retention.size flag to stable. #9004
  + Features:
  * Add Kuma service discovery. #8844
  * Add present_over_time PromQL function. #9097
  * Allow configuring exemplar storage via file and make it
    reloadable. #8974
  * UI: Allow selecting time range with mouse drag. #8977
  * promtool: Add feature flags flag --enable-feature. #8958
  * promtool: Add file_sd file validation. #8950
  + Enhancements:
  * Reduce blocking of outgoing remote write requests from series
    garbage collection. #9109
  * Improve write-ahead-log decoding performance. #9106
  * Improve append performance in TSDB by reducing mutexes usage.
  * Allow configuring max_samples_per_send for remote write
    metadata. #8959
  * Add __meta_gce_interface_ipv4_&lt;name&gt; meta label to GCE
    discovery. #8978
  * Add __meta_ec2_availability_zone_id meta label to EC2
    discovery. #8896
  * Add __meta_azure_machine_computer_name meta label to Azure
    discovery. #9112
  * Add __meta_hetzner_hcloud_labelpresent_&lt;labelname&gt; meta label
    to Hetzner discovery. #9028
  * promtool: Add compaction efficiency to promtool tsdb analyze
    reports. #8940
  * promtool: Allow configuring max block duration for
    backfilling via --max-block-duration flag. #8919
  * UI: Add sorting and filtering to flags page. #8988
  * UI: Improve alerts page rendering performance. #9005
  + Bugfixes:
  * Log when total symbol size exceeds 2^32 bytes, causing
    compaction to fail, and skip compaction. #9104
  * Fix incorrect target_limit reloading of zero value. #9120
  * Fix head GC and pending readers race condition. #9081
  * Fix timestamp handling in OpenMetrics parser. #9008
  * Fix potential duplicate metrics in /federate endpoint when
    specifying multiple matchers. #8885
  * Fix server configuration and validation for authentication
    via client cert. #9123
  * Allow start and end again as label names in PromQL queries.
    They were disallowed since the introduction of @ timestamp
    feature. #9119
- Upgrade to upstream version 2.28.1
  + Bugfixes:
  * HTTP SD: Allow charset specification in Content-Type header.
  * HTTP SD: Fix handling of disappeared target groups. #9019
  * Fix incorrect log-level handling after moving to go-kit/log.
- Upgrade to upstream version 2.28.0
  + Change:
  * UI: Make the new experimental PromQL editor the default.
  + Features:
  * Linode SD: Add Linode service discovery. #8846
  * HTTP SD: Add generic HTTP-based service discovery. #8839
  * Kubernetes SD: Allow configuring API Server access via a
    kubeconfig file. #8811
  * UI: Add exemplar display support to the graphing interface.
  * Consul SD: Add namespace support for Consul Enterprise. #8900
  + Enhancements:
  * Promtool: Allow silencing output when importing / backfilling
    data. #8917
  * Consul SD: Support reading tokens from file. #8926
  * Rules: Add a new .ExternalURL alert field templating
    variable, containing the external URL of the Prometheus
    server. #8878
  * Scrape: Add experimental body_size_limit scrape configuration
    setting to limit the allowed response body size for target
    scrapes. #8833 #8886
  * Kubernetes SD: Add ingress class name label for ingress
    discovery. #8916
  * UI: Show a startup screen with progress bar when the TSDB is
    not ready yet. #8662 #8908 #8909 #8946
  * SD: Add a target creation failure counter
    prometheus_target_sync_failed_total and improve target
    creation failure handling. #8786
  * TSDB: Improve validation of exemplar label set length. #8816
  * TSDB: Add a prometheus_tsdb_clean_start metric that indicates
    whether a TSDB lockfile from a previous run still existed
    upon startup. #8824
  + Bugfixes:
  * UI: In the experimental PromQL editor, fix autocompletion and
    parsing for special float values and improve series metadata
    fetching. #8856
  * TSDB: When merging chunks, split resulting chunks if they
    would contain more than the maximum of 120 samples. #8582
  * SD: Fix the computation of the
    prometheus_sd_discovered_targets metric when using multiple
    service discoveries. #8828</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645185600">- Require Go 1.16+
- Do not build on s390 architecture.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1645531200">- Fix Firewalld configuration file location (bsc#1196300)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1646654400">- Update vendor tarball with prometheus/client_golang 1.12.1
  (bsc#1196338)
  * Added 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1647604800">- Create firewalld-prometheus-config subpackage (bsc#1197042,
  jsc#SLE-24374, jsc#SLE-24375)</changelog>
  <changelog author="jgonzalez@suse.com" date="1649332800">- Build firewalld-prometheus-config only for SUSE Linux Enterprise
  15, 15.1 and 15.2, and require firewalld for it
- firewalld-prometheus-config needs to be a Recommends, not a
  Requires, as prometheus does not require it to run</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264000">- Fix authentication bypass by updating Prometheus Exporter Toolkit
  to version 0.7.3 (CVE-2022-46146, bsc#1208049)
- Restructure the spec to build web assets online
- Add:
  * Makefile
  * web-ui-2.32.1.tar.gz
  * 0003-Update-Go-modules.patch
- Drop:
  * 0003-Bump-client_golang-to-1.12.1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680264001">- Add:
  * npm_licenses.tar.bz2
  * PACKAGING_README.md
- Drop:
  * 0003-Update-Go-modules.patch
- Change:
  * 0001-Do-not-force-the-pure-Go-name-resolver.patch
  * 0002-Default-settings.patch
- Upgrade to version 2.37.6
  * Require Go 1.19
- Upgrade to version 2.37.5
  * [SECURITY] Security upgrade from go and upstream dependencies
    that include security fixes to the net/http and os packages.
- Upgrade to version 2.37.4
  * [SECURITY] Fix basic authentication bypass vulnerability
    (CVE-2022-46146, bsc#1208049, jsc#PED-3576).
- Upgrade to version 2.37.3
  * [BUGFIX] Update our regexp library to fix upstream
    CVE-2022-41715.
  * [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a
    memory leak.
- Upgrade to version 2.37.2
  * [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus
    startup.
  * [BUGFIX] Agent: Fix validation of flag options and prevent WAL
    from growing more than desired.
- Upgrade to version 2.37.1
  * [BUGFIX] Properly close file descriptor when logging unfinished
    queries.
  * [BUGFIX] TSDB: In the WAL watcher metrics, expose the
    type="exemplar" label instead of type="unknown" for exemplar
    records.
- Upgrade to version 2.37.0
  * [FEATURE] Nomad SD: New service discovery for Nomad built-in
    service discovery.
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node labels for
    endpoint role.
  * [ENHANCEMENT] PromQL: Optimise creation of signature
    with/without labels.
  * [ENHANCEMENT] TSDB: Memory optimizations.
  * [ENHANCEMENT] TSDB: Reduce sleep time when reading WAL.
  * [ENHANCEMENT] OAuth2: Add appropriate timeouts and User-Agent
    header.
  * [BUGFIX] Alerting: Fix Alertmanager targets not being updated
    when alerts were queued.
  * [BUGFIX] Hetzner SD: Make authentication files relative to
    Prometheus config file.
  * [BUGFIX] Promtool: Fix promtool check config not erroring
    properly on failures.
  * [BUGFIX] Scrape: Keep relabeled scrape interval and timeout on
    reloads.
  * [BUGFIX] TSDB: Don't increment
    prometheus_tsdb_compactions_failed_total when context is
    canceled.
  * [BUGFIX] TSDB: Fix panic if series is not found when deleting
    series.
  * [BUGFIX] TSDB: Increase
    prometheus_tsdb_mmap_chunk_corruptions_total on out of sequence
    errors.
  * [BUGFIX] Uyuni SD: Make authentication files relative to
    Prometheus configuration file and fix default configuration
    values.
- Upgrade to version 2.36.2
  * [BUGFIX] Fix serving of static assets like fonts and favicon.
- Upgrade to version 2.36.1
  * [BUGFIX] promtool: Add --lint-fatal option.
- Upgrade to version 2.36.0
  * [FEATURE] Add lowercase and uppercase relabel action.
  * [FEATURE] SD: Add IONOS Cloud integration.
  * [FEATURE] SD: Add Vultr integration.
  * [FEATURE] SD: Add Linode SD failure count metric.
  * [FEATURE] Add prometheus_ready metric.
  * [ENHANCEMENT] Add stripDomain to template function.
  * [ENHANCEMENT] UI: Enable active search through dropped targets.
  * [ENHANCEMENT] promtool: support matchers when querying label
    values.
  * [ENHANCEMENT] Add agent mode identifier.
  * [BUGFIX] Changing TotalQueryableSamples from int to int64.
  * [BUGFIX] tsdb/agent: Ignore duplicate exemplars.
  * [BUGFIX] TSDB: Fix chunk overflow appending samples at a
    variable rate.
  * [BUGFIX] Stop rule manager before TSDB is stopped.
- Upgrade to version 2.35.0
  * [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts.
  * [CHANGE] promtool: Add new flag --lint (enabled by default) for
    the commands check rules and check config, resulting in a new
    exit code (3) for linter errors.
  * [FEATURE] Support for automatically setting the variable
    GOMAXPROCS to the container CPU limit. Enable with the flag
  - -enable-feature=auto-gomaxprocs.
  * [FEATURE] PromQL: Extend statistics with total and peak number
    of samples in a query. Additionally, per-step statistics are
    available with --enable-feature=promql-per-step-stats and using
    stats=all in the query API. Enable with the flag
  - -enable-feature=per-step-stats.
  * [ENHANCEMENT] TSDB: more efficient sorting of postings read from
    WAL at startup.
  * [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures.
  * [ENHANCEMENT] Azure SD: Add an optional resource_group
    configuration.
  * [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1
    EndpointSlice (previously only discovery.k8s.io/v1beta1
    EndpointSlice was supported).
  * [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to
    discovered pods.
  * [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch
    OAuth2 tokens.
  * [ENHANCEMENT] Configuration: Add the ability to disable HTTP2.
  * [ENHANCEMENT] Config: Support overriding minimum TLS version.
  * [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io.
  * [BUGFIX] Fix OpenMetrics parser to sort uppercase labels
    correctly.
  * [BUGFIX] UI: Fix scrape interval and duration tooltip not
    showing on target page.
  * [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is
    false.
  * [BUGFIX] Agent: Fix ID collision when loading a WAL with
    multiple segments.
  * [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing
    the queue.
- Upgrade to version 2.34.0
  * [CHANGE] UI: Classic UI removed.
  * [CHANGE] Tracing: Migrate from Jaeger to OpenTelemetry based
    tracing.
  * [ENHANCEMENT] TSDB: Disable the chunk write queue by default and
    allow configuration with the experimental flag
  - -storage.tsdb.head-chunks-write-queue-size.
  * [ENHANCEMENT] HTTP SD: Add a failure counter.
  * [ENHANCEMENT] Azure SD: Set Prometheus User-Agent on requests.
  * [ENHANCEMENT] Uyuni SD: Reduce the number of logins to Uyuni.
  * [ENHANCEMENT] Scrape: Log when an invalid media type is
    encountered during a scrape.
  * [ENHANCEMENT] Scrape: Accept
    application/openmetrics-text;version=1.0.0 in addition to
    version=0.0.1.
  * [ENHANCEMENT] Remote-read: Add an option to not use external
    labels as selectors for remote read.
  * [ENHANCEMENT] UI: Optimize the alerts page and add a search bar.
  * [ENHANCEMENT] UI: Improve graph colors that were hard to see.
  * [ENHANCEMENT] Config: Allow escaping of $ with $$ when using
    environment variables with external labels.
  * [BUGFIX] PromQL: Properly return an error from
    histogram_quantile when metrics have the same labelset.
  * [BUGFIX] UI: Fix bug that sets the range input to the
    resolution.
  * [BUGFIX] TSDB: Fix a query panic when
    memory-snapshot-on-shutdown is enabled.
  * [BUGFIX] Parser: Specify type in metadata parser errors.
  * [BUGFIX] Scrape: Fix label limit changes not applying.
- Upgrade to version 2.33.5
  * [BUGFIX] Remote-write: Fix deadlock between adding to queue and
    getting batch.
- Upgrade to version 2.33.4
  * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the
    disk.
- Upgrade to version 2.33.3
  * [BUGFIX] Azure SD: Fix a regression when public IP Address isn't
    set.
- Upgrade to version 2.33.2
  * [BUGFIX] Azure SD: Fix panic when public IP Address isn't set.
  * [BUGFIX] Remote-write: Fix deadlock when stopping a shard.
- Upgrade to version 2.33.1
  * [BUGFIX] SD: Fix no such file or directory in K8s SD when not
    running inside K8s.
- Upgrade to version 2.33.0
  * [CHANGE] PromQL: Promote negative offset and @ modifer to stable
    features.
  * [CHANGE] Web: Promote remote-write-receiver to stable.
  * [FEATURE] Config: Add stripPort template function.
  * [FEATURE] Promtool: Add cardinality analysis to check metrics,
    enabled by flag --extended.
  * [FEATURE] SD: Enable target discovery in own K8s namespace.
  * [FEATURE] SD: Add provider ID label in K8s SD.
  * [FEATURE] Web: Add limit field to the rules API.
  * [ENHANCEMENT] Remote-write: Avoid allocations by buffering
    concrete structs instead of interfaces.
  * [ENHANCEMENT] Remote-write: Log time series details for
    out-of-order samples in remote write receiver.
  * [ENHANCEMENT] Remote-write: Shard up more when backlogged.
  * [ENHANCEMENT] TSDB: Use simpler map key to improve exemplar
    ingest performance.
  * [ENHANCEMENT] TSDB: Avoid allocations when popping from the
    intersected postings heap.
  * [ENHANCEMENT] TSDB: Make chunk writing non-blocking, avoiding
    latency spikes in remote-write.
  * [ENHANCEMENT] TSDB: Improve label matching performance.
  * [ENHANCEMENT] UI: Optimize the service discovery page and add a search bar.
  * [ENHANCEMENT] UI: Optimize the target page and add a search bar.
  * [BUGFIX] Promtool: Make exit codes more consistent.
  * [BUGFIX] Promtool: Fix flakiness of rule testing.
  * [BUGFIX] Remote-write: Update
    prometheus_remote_storage_queue_highest_sent_timestamp_seconds
    metric when write irrecoverably fails.
  * [BUGFIX] Storage: Avoid panic in BufferedSeriesIterator.
  * [BUGFIX] TSDB: CompactBlockMetas should produce correct
    mint/maxt for overlapping blocks.
  * [BUGFIX] TSDB: Fix logging of exemplar storage size.
  * [BUGFIX] UI: Fix overlapping click targets for the alert state
    checkboxes.
  * [BUGFIX] UI: Fix Unhealthy filter on target page to actually
    display only Unhealthy targets.
  * [BUGFIX] UI: Fix autocompletion when expression is empty.
  * [BUGFIX] TSDB: Fix deadlock from simultaneous GC and write.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1680696000">- Require promu &gt;= 0.14.0 for building</changelog>
</package>
<package pkgid="d03d7185289b8844b08da40721df7b270d568b895f6cf10f779e8b40fdb85e5b" name="golang-github-vpenso-prometheus_slurm_exporter" arch="aarch64">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="3b1e72aa2c3815fbcb1b3f85677b673829d6a41b1e42fe11e42783f1e2e5a755" name="golang-github-vpenso-prometheus_slurm_exporter" arch="ppc64le">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="5b0e72744d704ca11ffa48a57209defcc141d1696e66ddd70e0f2e731bc53a86" name="golang-github-vpenso-prometheus_slurm_exporter" arch="s390x">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="ab6eb9a455d20daa732efa9bce9868c92de2b85c904663f1b7e334abd4d8a2e7" name="golang-github-vpenso-prometheus_slurm_exporter" arch="src">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="9fb65115374107285bc8bf4a9fc92bc0fb6b817711f4b613f06fcf0402c523c9" name="golang-github-vpenso-prometheus_slurm_exporter" arch="x86_64">
  <version epoch="0" ver="0.19" rel="150300.3.5.1"/>
  <changelog author="aguerrero@suse.com" date="1575288000">- Initial release.</changelog>
  <changelog author="aguerrero@suse.com" date="1575633600">- Add new package with grafana-dashboards
- Add README.packaging
- Document use_sbin.patch</changelog>
  <changelog author="aguerrero@suse.com" date="1576065600">- Remove grafana-dashboards and do not add the dashboard in the tarball,
  its license needs to be clarified. It's also easier for users
  to install the board from grafana.com</changelog>
  <changelog author="aguerrero@suse.com" date="1576670400">- List all source files.</changelog>
  <changelog author="aguerrero@suse.com" date="1606910400">- New version 0.15
  * Metric updates
  * Bugfixes
- Upstream now provides go.mod, update packaging accordingly.</changelog>
  <changelog author="aguerrero@suse.com" date="1616068800">- New version 0.17
  * Export information about shares via sshare
- New version 0.16
  * Add support to provide information about GPU GREs usage</changelog>
  <changelog author="eich@suse.com" date="1626955200">- Update to version 0.19
  * GPUs accounting has to be activated explicitly via cmd line option.
  * Export detailed usage info for every node (CPU, Memory).
  NOTE: With the present version of Slurm (20.11), GPU accounting
  in the prometheus-slurm-exporter will cause the exporter to
  terminate, thus it must not be enabled for the time being.
- Do not ship sources.</changelog>
</package>
<package pkgid="d67ea3cd4e4c178ef5bdb3854aad9a5cddba0165b4623974837d22a583717ed7" name="google-cloud-sap-agent" arch="aarch64">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="ebe4b9e63f1163ab44c1251863b15458a3575d1771a60e225b505ab146d3000a" name="google-cloud-sap-agent" arch="ppc64le">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="4cd4f0cb7cdd70599df7c74706eb3928466639253b9fdeb874324fa371e1ea3b" name="google-cloud-sap-agent" arch="s390x">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="024a98520bb68db94735f2219b64af7c37daadbea295fb2c03363360f917f038" name="google-cloud-sap-agent" arch="src">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="2fad5f8c4d15a03cf39a0f8d97e3a132764bc989aba0fefdc6984d9788c8212c" name="google-cloud-sap-agent" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150100.3.7.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="bb485aa6682b9c070fe6b5a668b32bb87e610a83de52d96104fdd18ba370e4d2" name="google-cloud-sap-agent" arch="aarch64">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="836310d7ee1410f5e328483194d2c9d09851eb31a63a6499164723ba94a157d0" name="google-cloud-sap-agent" arch="ppc64le">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="a8f30ef7463bd92e19e2292b8c366f813fcc1d48d7f6fb1abc2478cf30f6a90b" name="google-cloud-sap-agent" arch="s390x">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="2b4c29528621b370a82a4418d095bda3095b6c638dcd574233fc218790ee754a" name="google-cloud-sap-agent" arch="src">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="61a32553a62401d1ec21b2c478a1fe0bcf059dffe1da0bd8796120fad14daec7" name="google-cloud-sap-agent" arch="x86_64">
  <version epoch="0" ver="1.5.1" rel="150100.3.9.1"/>
  <changelog author="rjschwei@suse.com" date="1676548800">- Initial build (#jsc-PED-2879)
  + Version 1.0</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1683547200">- Update to version 1.5.1 (bsc#1210464)
  + No upstream changelog provided
- Raise golang API version to 1.20</changelog>
</package>
<package pkgid="1d6c061181c42294d7a1444380cbc1e8eab80a314c37cb1ab5f3015feb12d8cd" name="grafana" arch="aarch64">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="618f86adec12342edd2a0408e460d3b54dd62cff8cfc9783117ba22bb408e92f" name="grafana" arch="ppc64le">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="8d925c3bb830abacf6223234c219496b8571356d7a7f72bc13f1cb4ed54cebe6" name="grafana" arch="s390x">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="848fa5b0d1069d888ae390893579dd775730dc0fbf78d6f8725f324079fb36b1" name="grafana" arch="src">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="1a044d18240d82e9302cc094d95d6c68cdd3420b6c801849b9bb1ab29d03fcd2" name="grafana" arch="x86_64">
  <version epoch="0" ver="9.5.1" rel="150200.3.41.3"/>
  <changelog author="daniel.molkentin@suse.com" date="1621512000">- Update to version 7.5.7:
  * Updated relref to "Configuring exemplars" section (#34240) (#34243)
  * Added exemplar topic (#34147) (#34226)
  * Quota: Do not count folders towards dashboard quota (#32519) (#34025)
  * Instructions to separate emails with semicolons (#32499) (#34138)
  * Docs: Remove documentation of v8 generic OAuth feature (#34018)
  * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975)
  * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935)
  * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936)
  * Stop hoisting @icons/material (#33922)
  * Chore: fix react-color version in yarn.lock (#33914)
  * "Release: Updated versions in package to 7.5.6" (#33909)
  * Loki: fix label browser crashing when + typed (#33900) (#33901)
  * Document `hide_version` flag (#33670) (#33881)
  * Add isolation level db configuration parameter (#33830) (#33878)
  * Sanitize PromLink button (#33874) (#33876)
  * Removed content as per MarcusE's suggestion in https://github.com/grafana/grafana/issues/33822. (#33870) (#33872)
  * Docs feedback: /administration/provisioning.md (#33804) (#33842)
  * Docs: delete from high availability docs references to removed configurations related to session storage (#33827) (#33851)
  * Docs: Update _index.md (#33797) (#33799)
  * Docs: Update installation.md (#33656) (#33703)
  * GraphNG: uPlot 1.6.9 (#33598) (#33612)
  * dont consider invalid email address a failed email (#33671) (#33681)
  * InfluxDB: Improve measurement-autocomplete behavior in query editor (#33494) (#33625)
  * add template for dashboard url parameters  (#33549) (#33588)
  * Add note to Snapshot API doc to specify that user has to provide the entire dashboard model  (#33572) (#33586)
  * Update team.md (#33454) (#33536)
  * Removed duplicate file "dashboard_folder_permissions.md (#33497)
  * Document customQueryParameters for prometheus datasource provisioning (#33440) (#33495)
  * ReleaseNotes: Updated changelog and release notes for 7.5.5 (#33473) (#33492)
  * Documentation: Update developer-guide.md (#33478) (#33490)
  * add closed parenthesis to fix a hyperlink (#33471) (#33481)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1632225600">- Add patch 0001-Add-source-code-reference.patch
  * Add URL to package source code in the login page footer</changelog>
  <changelog author="ro@suse.de" date="1637150400">- Update to version 7.5.11:
  * Fix Snapshot authentication bypass (bsc#1191454, CVE-2021-39226)
  * Fix certs issue (#40002)
  * Release v7.5.11 (#124)
  * Fix static path matching issue in macaron
  * OAuth: add docs for disableAutoLogin param (#38752) (#38894)
  * Fix #747; remove 'other variables'. (#37866) (#37878)
  * Update alert docs (#33658) (#33659)
  * [7.5.x] Docs: added documentation for the "prepare time series"-transformation. (#36836)
  * cherry picked dc5778c303ca555b70e8ca8c28e95997e26ecfc1 (#36813)
  * "Release: Updated versions in package to 7.5.10" (#36792)
  * [v7.5.x] Transformations: add 'prepare time series' transformer (#36749)
  * Remove verify-drone from windows (#36775)
  * Update queries.md (#31941) (#36764)
  * Updated content to specify method to use to get keyboard shortcuts wh… (#36084) (#36087)
  * ReleaseNotes: Updated changelog and release notes for 7.5.9 (#36057) (#36077)
  * "Release: Updated versions in package to 7.5.9" (#36056)
  * Login: Fixes Unauthorized message showing when on login page or snapshot page (#35311) (#35880)
  * ReleaseNotes: Updated changelog and release notes for 7.5.8 (#35703) (#35822)
  * CI: Upgrade pipeline tool to use main (#35804)
  * CI: try to force v7.5.x instead of master (#35799)
  * CI: supports move from master to main in 7.5.x release branch (#35747)
  * "Release: Updated versions in package to 7.5.8" (#35701)
  * Chore: Bump acorn and lodash-es (#35650)
  * Snapshots: Remove dashboard links from snapshots (#35567) (#35585)
  * [v7.5.x] Datasource: Allow configuring `MaxConnsPerHost` (#35519)
  * Remove docs sync from v7.5.x (#35443)
  * "Release: Updated versions in package to 7.5.7" (#35412)
  * Add max_idle_connections_per_host to config (#35365)
  * Update go.sum to fix failing enterprise pipeline (#35353)
  * [v7.5.x] HTTP Client: Introduce `go-conntrack`  (#35321)
  * Fix Markdown syntax in enterprise/license/_index.md (#34683) (#35210)
  * Update annotations.md (#33218) (#35138)
  * Docs: Add query caching to enterprise docs page (#34751) (#35025)
  * [7.5.x] Admin: hide per role counts for licensed users (#34994)
  * cleanup shortcodes, image paths (#34827)
  * Security: Upgrade Thrift dependency (#34698) (#34702)
  * Docs: Fix Quick Start link on Geting Started Influx page (#34549) (#34603)
  * Add link to release notes v7.5.7 (#34460) (#34474)
  * Update 7.5.x landing page (#34447)
  * ReleaseNotes: Updated changelog and release notes for 7.5.7 (#34383) (#34428)
- update to 7.5.10
  * [v7.5.x] Transformations: add "prepare time series" transformer. [#36749]
- update to 7.5.9
  * Login: Fix Unauthorized message that is displayed on sign-in or snapshot page. [#35880]
- drop drop-grafana-aws-sdk-0.3.0-module.patch (upstream)</changelog>
  <changelog author="ro@suse.de" date="1637236800">- recreate tarballs using the makefile to update the
  npm and go modules required</changelog>
  <changelog author="witold.bedyk@suse.com" date="1639396800">- Update to version 7.5.12:
  * Fix markdown path traversal (#42969, bsc#1193688, CVE-2021-43813)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1642680000">- Update to Go 1.17.
- Add build-time dependency on `wire`.
- Update license to GNU Affero General Public License v3.0.
- Update to version 8.3.4
  + Security:
  * GetUserInfo: return an error if no user was found
    (bsc#1194873, CVE-2022-21673)
  + Features and enhancements:
  * Alerting: Allow configuration of non-ready alertmanagers.
  * Alerting: Allow customization of Google chat message.
  * AppPlugins: Support app plugins with only default nav.
  * InfluxDB: query editor: skip fields in metadata queries.
  * Postgres/MySQL/MSSQL: Cancel in-flight SQL query if user
    cancels query in grafana.
  * Prometheus: Forward oauth tokens after prometheus datasource
    migration.
  + Bug fixes:
  * Azure Monitor: Bug fix for variable interpolations in metrics
    dropdowns.
  * Azure Monitor: Improved error messages for variable queries.
  * CloudMonitoring: Fixes broken variable queries that use group
    bys.
  * Configuration: You can now see your expired API keys if you
    have no active ones.
  * Elasticsearch: Fix handling multiple datalinks for a single
    field.
  * Export: Fix error being thrown when exporting dashboards
    using query variables that reference the default datasource.
  * ImportDashboard: Fixes issue with importing dashboard and
    name ending up in uid.
  * Login: Page no longer overflows on mobile.
  * Plugins: Set backend metadata property for core plugins.
  * Prometheus: Fill missing steps with null values.
  * Prometheus: Fix interpolation of $__rate_interval variable.
  * Prometheus: Interpolate variables with curly brackets syntax.
  * Prometheus: Respect the http-method data source setting.
  * Table: Fixes issue with field config applied to wrong fields
    when hiding columns.
  * Toolkit: Fix bug with rootUrls not being properly parsed when
    signing a private plugin.
  * Variables: Fix so data source variables are added to adhoc
    configuration.
  + Plugin development fixes &amp; changes:
  * Toolkit: Revert build config so tslib is bundled with plugins
    to prevent plugins from crashing.
- Update to version 8.3.3:
  + Features and enhancements:
  * BarChart: Use new data error view component to show actions
    in panel edit.
  * CloudMonitor: Iterate over pageToken for resources.
  * Macaron: Prevent WriteHeader invalid HTTP status code panic.
  + Bug fixes:
  * AnnoListPanel: Fix interpolation of variables in tags.
  * CloudWatch: Allow queries to have no dimensions specified.
  * CloudWatch: Fix broken queries for users migrating from
    8.2.4/8.2.5 to 8.3.0.
  * CloudWatch: Make sure MatchExact flag gets the right value.
  * Dashboards: Fix so that empty folders can be deleted from the
    manage dashboards/folders page.
  * InfluxDB: Improve handling of metadata query errors in
    InfluxQL.
  * Loki: Fix adding of ad hoc filters for queries with parser
    and line_format expressions.
  * Prometheus: Fix running of exemplar queries for non-histogram
    metrics.
  * Prometheus: Interpolate template variables in interval.
  * StateTimeline: Fix toolitp not showing when for frames with
    multiple fields.
  * TraceView: Fix virtualized scrolling when trace view is
    opened in right pane in Explore.
  * Variables: Fix repeating panels for on time range changed
    variables.
  * Variables: Fix so queryparam option works for scoped
    variables.
- Update to version 8.3.2
  + Security: Fixes CVE-2021-43813 and CVE-2021-43815,
    bsc#1193686.
- Update to version 8.3.1
  + Security: Fixes CVE-2021-43798, bsc#1193492.
- Update to version 8.3.0
  + Features and enhancements:
  * Alerting: Prevent folders from being deleted when they
    contain alerts.
  * Alerting: Show full preview value in tooltip.
  * BarGauge: Limit title width when name is really long.
  * CloudMonitoring: Avoid to escape regexps in filters.
  * CloudWatch: Add support for AWS Metric Insights.
  * TooltipPlugin: Remove other panels' shared tooltip in edit
    panel.
  * Visualizations: Limit y label width to 40% of visualization
    width.
  + Bug fixes:
  * Alerting: Clear alerting rule evaluation errors after
    intermittent failures.
  * Alerting: Fix refresh on legacy Alert List panel.
  * Dashboard: Fix queries for panels with non-integer widths.
  * Explore: Fix url update inconsistency.
  * Prometheus: Fix range variables interpolation for time ranges
    smaller than 1 second.
  * ValueMappings: Fixes issue with regex value mapping that only
    sets color.
- Update to version 8.3.0-beta2
  + Breaking changes:
  * Grafana 8 Alerting enabled by default for installations that
    do not use legacy alerting.
  * Keep Last State for "If execution error or timeout" when
    upgrading to Grafana 8 alerting.
  + Features and enhancements:
  * Alerting: Create DatasourceError alert if evaluation returns
    error.
  * Alerting: Make Unified Alerting enabled by default for those
    who do not use legacy alerting.
  * Alerting: Support mute timings configuration through the api
    for the embedded alert manager.
  * CloudWatch: Add missing AWS/Events metrics.
  * Docs: Add easier to find deprecation notices to certain data
    sources and to the changelog.
  * Plugins Catalog: Enable install controls based on the
    pluginAdminEnabled flag.
  * Table: Add space between values for the DefaultCell and
    JSONViewCell.
  * Tracing: Make query editors available in dashboard for Tempo
    and Zipkin.
  + Bug fixes:
  * AccessControl: Renamed orgs roles, removed fixed:orgs:reader
    introduced in beta1.
  * Azure Monitor: Add trap focus for modals in grafana/ui and
    other small a11y fixes for Azure Monitor.
  * CodeEditor: Prevent suggestions from being clipped.
  * Dashboard: Fix cache timeout persistence.
  * Datasource: Fix stable sort order of query responses.
  * Explore: Fix error in query history when removing last item.
  * Logs: Fix requesting of older logs when flipped order.
  * Prometheus: Fix running of health check query based on access
    mode.
  * TextPanel: Fix suggestions for existing panels.
  * Tracing: Fix incorrect indentations due to reoccurring
    spanIDs.
  * Tracing: Show start time of trace with milliseconds
    precision.
  * Variables: Make renamed or missing variable section
    expandable.
  + Plugin development fixes &amp; changes:
  * Select: Select menus now properly scroll during keyboard
    navigation.
- Update to version 8.3.0-beta1
  + Features and enhancements:
  * Alerting: Add UI for contact point testing with custom
    annotations and labels.
  * Alerting: Make alert state indicator in panel header work
    with Grafana 8 alerts.
  * Alerting: Option for Discord notifier to use webhook name.
  * Annotations: Deprecate AnnotationsSrv.
  * Auth: Omit all base64 paddings in JWT tokens for the JWT
    auth.
  * Azure Monitor: Clean up fields when editing Metrics.
  * AzureMonitor: Add new starter dashboards.
  * AzureMonitor: Add starter dashboard for app monitoring with
    Application Insights.
  * Barchart/Time series: Allow x axis label.
  * CLI: Improve error handling for installing plugins.
  * CloudMonitoring: Migrate to use backend plugin SDK contracts.
  * CloudWatch Logs: Add retry strategy for hitting max
    concurrent queries.
  * CloudWatch: Add AWS RoboMaker metrics and dimension.
  * CloudWatch: Add AWS Transfer metrics and dimension.
  * Dashboard: replace datasource name with a reference object.
  * Dashboards: Show logs on time series when hovering.
  * Elasticsearch: Add support for Elasticsearch 8.0 (Beta).
  * Elasticsearch: Add time zone setting to Date Histogram
    aggregation.
  * Elasticsearch: Enable full range log volume histogram.
  * Elasticsearch: Full range logs volume.
  * Explore: Allow changing the graph type.
  * Explore: Show ANSI colors when highlighting matched words in
    the logs panel.
  * Graph(old) panel: Listen to events from Time series panel.
  * Import: Load gcom dashboards from URL.
  * LibraryPanels: Improves export and import of library panels
    between orgs.
  * OAuth: Support PKCE.
  * Panel edit: Overrides now highlight correctly when searching.
  * PanelEdit: Display drag indicators on draggable sections.
  * Plugins: Refactor Plugin Management.
  * Prometheus: Add custom query parameters when creating
    PromLink url.
  * Prometheus: Remove limits on metrics, labels, and values in
    Metrics Browser.
  * StateTimeline: Share cursor with rest of the panels.
  * Tempo: Add error details when json upload fails.
  * Tempo: Add filtering for service graph query.
  * Tempo: Add links to nodes in Service Graph pointing to
    Prometheus metrics.
  * Time series/Bar chart panel: Add ability to sort series via
    legend.
  * TimeSeries: Allow multiple axes for the same unit.
  * TraceView: Allow span links defined on dataFrame.
  * Transformations: Support a rows mode in labels to fields.
  * ValueMappings: Don't apply field config defaults to time
    fields.
  * Variables: Only update panels that are impacted by variable
    change.
  + Bug fixes:
  * API: Fix dashboard quota limit for imports.
  * Alerting: Fix rule editor issues with Azure Monitor data
    source.
  * Azure monitor: Make sure alert rule editor is not enabled
    when template variables are being used.
  * CloudMonitoring: Fix annotation queries.
  * CodeEditor: Trigger the latest getSuggestions() passed to
    CodeEditor.
  * Dashboard: Remove the current panel from the list of options
    in the Dashboard datasource.
  * Encryption: Fix decrypting secrets in alerting migration.
  * InfluxDB: Fix corner case where index is too large in ALIAS
    field.
  * NavBar: Order App plugins alphabetically.
  * NodeGraph: Fix zooming sensitivity on touchpads.
  * Plugins: Add OAuth pass-through logic to api/ds/query
    endpoint.
  * Snapshots: Fix panel inspector for snapshot data.
  * Tempo: Fix basic auth password reset on adding tag.
  * ValueMapping: Fixes issue with regex mappings.
  + Plugin development fixes &amp; changes:
  * grafana/ui: Enable slider marks display.
- Update to version 8.2.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.2.6
  + Features and enhancements:
  * Security: Upgrade Docker base image to Alpine 3.14.3.
  * Security: Upgrade Go to 1.17.2.
  + Bug fixes:
  * TimeSeries: Fix fillBelowTo wrongly affecting fills of
    unrelated series.
- Update to version 8.2.5
  + Breaking changes:
  * Fix No Data behaviour in Legacy Alerting.
  + Bug fixes:
  * Alerting: Fix a bug where the metric in the evaluation string
    was not correctly populated.
  * Alerting: Fix no data behaviour in Legacy Alerting for alert
    rules using the AND operator.
  * CloudMonitoring: Ignore min and max aggregation in MQL
    queries.
  * Dashboards: 'Copy' is no longer added to new dashboard
    titles.
  * DataProxy: Fix overriding response body when response is a
    WebSocket upgrade.
  * Elasticsearch: Use field configured in query editor as field
    for date_histogram aggregations.
  * Explore: Fix running queries without a datasource property
    set.
  * InfluxDB: Fix numeric aliases in queries.
  * Plugins: Ensure consistent plugin settings list response.
  * Tempo: Fix validation of float durations.
  * Tracing: Correct tags for each span are shown.
- Update to version 8.2.4
  + Security: Fixes CVE-2021-41244, bsc#1192763.
- Update to version 8.2.3
  + Security: Fixes CVE-2021-41174, bsc#1192383.
- Update to version 8.2.2
  + Features and enhancements:
  * Annotations: We have improved tag search performance.
  * Application: You can now configure an error-template title.
  * AzureMonitor: We removed a restriction from the resource
    filter query.
  * Packaging: We removed the ProcSubset option in systemd. This
    option prevented Grafana from starting in LXC environments.
  * Prometheus: We removed the autocomplete limit for metrics.
  * Table: We improved the styling of the type icons to make them
    more distinct from column / field name.
  * ValueMappings: You can now use value mapping in stat, gauge,
    bar gauge, and pie chart visualizations.
  + Bug fixes:
  * Alerting: Fix panic when Slack's API sends unexpected
    response.
  * Alerting: The Create Alert button now appears on the
    dashboard panel when you are working with a default
    datasource.
  * Explore: We fixed the problem where the Explore log panel
    disappears when an Elasticsearch logs query returns no
    results.
  * Graph: You can now see annotation descriptions on hover.
  * Logs: The system now uses the JSON parser only if the line is
    parsed to an object.
  * Prometheus: We fixed the issue where the system did not reuse
    TCP connections when querying from Grafana alerting.
  * Prometheus: We fixed the problem that resulted in an error
    when a user created a query with a $__interval min step.
  * RowsToFields: We fixed the issue where the system was not
    properly interpreting number values.
  * Scale: We fixed how the system handles NaN percent when data
    min = data max.
  * Table panel: You can now create a filter that includes
    special characters.
- Update to version 8.2.1
  + Bug fixes:
  * Dashboard: Fix rendering of repeating panels.
  * Datasources: Fix deletion of data source if plugin is not
    found.
  * Packaging: Remove systemcallfilters sections from systemd
    unit files.
  * Prometheus: Add Headers to HTTP client options.
- Update to version 8.2.0
  + Features and enhancements:
  * AWS: Updated AWS authentication documentation.
  * Alerting: Added support Alertmanager data source for upstream
    Prometheus AM implementation.
  * Alerting: Allows more characters in label names so
    notifications are sent.
  * Alerting: Get alert rules for a dashboard or a panel using
    /api/v1/rules endpoints.
  * Annotations: Improved rendering performance of event markers.
  * CloudWatch Logs: Skip caching for log queries.
  * Explore: Added an opt-in configuration for Node Graph in
    Jaeger, Zipkin, and Tempo.
  * Packaging: Add stricter systemd unit options.
  * Prometheus: Metrics browser can now handle label values with
    special characters.
  + Bug fixes:
  * CodeEditor: Ensure that we trigger the latest onSave callback
    provided to the component.
  * DashboardList/AlertList: Fix for missing All folder value.
  + Plugin development fixes &amp; changes:
  * Plugins: Create a mock icon component to prevent console
    errors.
- Update to version 8.2.0-beta2
  + Features and enhancements:
  * AccessControl: Document new permissions restricting data
    source access.
  * TimePicker: Add fiscal years and search to time picker.
  * Alerting: Added support for Unified Alerting with Grafana HA.
  * Alerting: Added support for tune rule evaluation using
    configuration options.
  * Alerting: Cleanups alertmanager namespace from key-value
    store when disabling Grafana 8 alerts.
  * Alerting: Remove ngalert feature toggle and introduce two new
    settings for enabling Grafana 8 alerts and disabling them for
    specific organisations.
  * CloudWatch: Introduced new math expression where it is
    necessary to specify the period field.
  * InfluxDB: Added support for $__interval and $__interval_ms in
    Flux queries for alerting.
  * InfluxDB: Flux queries can use more precise start and end
    timestamps with nanosecond-precision.
  * Plugins Catalog: Make the catalog the default way to interact
    with plugins.
  * Prometheus: Removed autocomplete limit for metrics.
  + Bug fixes:
  * Alerting: Fixed an issue where the edit page crashes if you
    tried to preview an alert without a condition set.
  * Alerting: Fixed rules migration to keep existing Grafana 8
    alert rules.
  * Alerting: Fixed the silence file content generated during
    migration.
  * Analytics: Fixed an issue related to interaction event
    propagation in Azure Application Insights.
  * BarGauge: Fixed an issue where the cell color was lit even
    though there was no data.
  * BarGauge: Improved handling of streaming data.
  * CloudMonitoring: Fixed INT64 label unmarshal error.
  * ConfirmModal: Fixes confirm button focus on modal open.
  * Dashboard: Add option to generate short URL for variables
    with values containing spaces.
  * Explore: No longer hides errors containing refId property.
  * Fixed an issue that produced State timeline panel tooltip
    error when data was not in sync.
  * InfluxDB: InfluxQL query editor is set to always use
    resultFormat.
  * Loki: Fixed creating context query for logs with parsed
    labels.
  * PageToolbar: Fixed alignment of titles.
  * Plugins Catalog: Update to the list of available panels after
    an install, update or uninstall.
  * TimeSeries: Fixed an issue where the shared cursor was not
    showing when hovering over in old Graph panel.
  * Variables: Fixed issues related to change of focus or refresh
    pages when pressing enter in a text box variable input.
  * Variables: Panel no longer crash when using the adhoc
    variable in data links.
- Update to version 8.2.0-beta1
  + Features and enhancements:
  * AccessControl: Introduce new permissions to restrict access
    for reloading provisioning configuration.
  * Alerting: Add UI to edit Cortex/Loki namespace, group names,
    and group evaluation interval.
  * Alerting: Add a Test button to test contact point.
  * Alerting: Allow creating/editing recording rules for Loki and
    Cortex.
  * Alerting: Metrics should have the label org instead of user.
  * Alerting: Sort notification channels by name to make them
    easier to locate.
  * Alerting: Support org level isolation of notification
    configuration.
  * AzureMonitor: Add data links to deep link to Azure Portal
    Azure Resource Graph.
  * AzureMonitor: Add support for annotations from Azure Monitor
    Metrics and Azure Resource Graph services.
  * AzureMonitor: Show error message when subscriptions request
    fails in ConfigEditor.
  * Chore: Update to Golang 1.16.7.
  * CloudWatch Logs: Add link to X-Ray data source for trace IDs
    in logs.
  * CloudWatch Logs: Disable query path using websockets (Live)
    feature.
  * CloudWatch/Logs: Don't group dataframes for non time series
    queries.
  * Cloudwatch: Migrate queries that use multiple stats to one
    query per stat.
  * Dashboard: Keep live timeseries moving left (v2).
  * Datasources: Introduce response_limit for datasource
    responses.
  * Explore: Add filter by trace or span ID to trace to logs
    feature.
  * Explore: Download traces as JSON in Explore Inspector.
  * Explore: Reuse Dashboard's QueryRows component.
  * Explore: Support custom display label for derived fields
    buttons for Loki datasource.
  * Grafana UI: Update monaco-related dependencies.
  * Graphite: Deprecate browser access mode.
  * InfluxDB: Improve handling of intervals in alerting.
  * InfluxDB: InfluxQL query editor: Handle unusual characters in
    tag values better.
  * Jaeger: Add ability to upload JSON file for trace data.
  * LibraryElements: Enable specifying UID for new and existing
    library elements.
  * LibraryPanels: Remove library panel icon from the panel
    header so you can no longer tell that a panel is a library
    panel from the dashboard view.
  * Logs panel: Scroll to the bottom on page refresh when sorting
    in ascending order.
  * Loki: Add fuzzy search to label browser.
  * Navigation: Implement active state for items in the Sidemenu.
  * Packaging: Add stricter systemd unit options.
  * Packaging: Update PID file location from /var/run to /run.
  * Plugins: Add Hide OAuth Forward config option.
  * Postgres/MySQL/MSSQL: Add setting to limit the maximum number
    of rows processed.
  * Prometheus: Add browser access mode deprecation warning.
  * Prometheus: Add interpolation for built-in-time variables to
    backend.
  * Tempo: Add ability to upload trace data in JSON format.
  * TimeSeries/XYChart: Allow grid lines visibility control in
    XYChart and TimeSeries panels.
  * Transformations: Convert field types to time string number or
    boolean.
  * Value mappings: Add regular-expression based value mapping.
  * Zipkin: Add ability to upload trace JSON.
  + Bug fixes:
  * Admin: Prevent user from deleting user's current/active
    organization.
  * LibraryPanels: Fix library panel getting saved in the
    dashboard's folder.
  * OAuth: Make generic teams URL and JMES path configurable.
  * QueryEditor: Fix broken copy-paste for mouse middle-click
  * Thresholds: Fix undefined color in "Add threshold".
  * Timeseries: Add wide-to-long, and fix multi-frame output.
  * TooltipPlugin: Fix behavior of Shared Crosshair when Tooltip
    is set to All.
  + Plugin development fixes &amp; changes:
  * Grafana UI: Fix TS error property css is missing in type.
- Update to version 8.1.8
  + Security: Fixes CVE-2021-43798.
- Update to version 8.1.7
  + Bug fixes:
  * Alerting: Fix alerts with evaluation interval more than 30
    seconds resolving before notification.
  * Elasticsearch/Prometheus: Fix usage of proper SigV4 service
    namespace.
- Update to version 8.1.6
  + Security: Fixes CVE-2021-39226.
- Update to version 8.1.5
  + Bug fixes:
  * BarChart: Fixes panel error that happens on second refresh.
- Update to version 8.1.4
  + Features and enhancements
  * Explore: Ensure logs volume bar colors match legend colors.
  * LDAP: Search all DNs for users.
  + Bug fixes:
  * Alerting: Fix notification channel migration.
  * Annotations: Fix blank panels for queries with unknown data
    sources.
  * BarChart: Fix stale values and x axis labels.
  * Graph: Make old graph panel thresholds work even if ngalert
    is enabled.
  * InfluxDB: Fix regex to identify / as separator.
  * LibraryPanels: Fix update issues related to library panels in
    rows.
  * Variables: Fix variables not updating inside a Panel when the
    preceding Row uses "Repeat For".
- Update to version 8.1.3
  + Bug fixes
  * Alerting: Fix alert flapping in the internal alertmanager.
  * Alerting: Fix request handler failed to convert dataframe
    "results" to plugins.DataTimeSeriesSlice: input frame is not
    recognized as a time series.
  * Dashboard: Fix UIDs are not preserved when importing/creating
    dashboards thru importing .json file.
  * Dashboard: Forces panel re-render when exiting panel edit.
  * Dashboard: Prevent folder from changing when navigating to
    general settings.
  * Docker: Force use of libcrypto1.1 and libssl1.1 versions to
    fix CVE-2021-3711, bsc#1189520.
  * Elasticsearch: Fix metric names for alert queries.
  * Elasticsearch: Limit Histogram field parameter to numeric
    values.
  * Elasticsearch: Prevent pipeline aggregations to show up in
    terms order by options.
  * LibraryPanels: Prevent duplicate repeated panels from being
    created.
  * Loki: Fix ad-hoc filter in dashboard when used with parser.
  * Plugins: Track signed files + add warn log for plugin assets
    which are not signed.
  * Postgres/MySQL/MSSQL: Fix region annotations not displayed
    correctly.
  * Prometheus: Fix validate selector in metrics browser.
  * Security: Fix stylesheet injection vulnerability.
  * Security: Fix short URL vulnerability.
- Update to version 8.1.2
  + Features and enhancements:
  * AzureMonitor: Add support for PostgreSQL and MySQL Flexible
    Servers.
  * Datasource: Change HTTP status code for failed datasource
    health check to 400.
  * Explore: Add span duration to left panel in trace viewer.
  * Plugins: Use file extension allowlist when serving plugin
    assets instead of checking for UNIX executable.
  * Profiling: Add support for binding pprof server to custom
    network interfaces.
  * Search: Make search icon keyboard navigable.
  * Template variables: Keyboard navigation improvements.
  * Tooltip: Display ms within minute time range.
  + Bug fixes:
  * Alerting: Fix saving LINE contact point.
  * Annotations: Fix alerting annotation coloring.
  * Annotations: Alert annotations are now visible in the correct
    Panel.
  * Auth: Hide SigV4 config UI and disable middleware when its
    config flag is disabled.
  * Dashboard: Prevent incorrect panel layout by comparing window
    width against theme breakpoints.
  * Elasticsearch: Fix metric names for alert queries.
  * Explore: Fix showing of full log context.
  * PanelEdit: Fix 'Actual' size by passing the correct panel
    size to Dashboard.
  * Plugins: Fix TLS datasource settings.
  * Variables: Fix issue with empty drop downs on navigation.
  * Variables: Fix URL util converting false into true.
  + Plugin development fixes &amp; changes:
  * Toolkit: Fix matchMedia not found error.
- Update to version 8.1.1
  + Bug fixes:
  * CloudWatch Logs: Fix crash when no region is selected.
- Update to version 8.1.0
  + Features and enhancements:
  * Alerting: Deduplicate receivers during migration.
  * ColorPicker: Display colors as RGBA.
  * Select: Make portalling the menu opt-in, but opt-in
    everywhere.
  * TimeRangePicker: Improve accessibility.
  + Bug fixes:
  * Annotations: Correct annotations that are displayed upon page
    refresh.
  * Annotations: Fix Enabled button that disappeared from Grafana
    v8.0.6.
  * Annotations: Fix data source template variable that was not
    available for annotations.
  * AzureMonitor: Fix annotations query editor that does not
    load.
  * Geomap: Fix scale calculations.
  * GraphNG: Fix y-axis autosizing.
  * Live: Display stream rate and fix duplicate channels in list
    response.
  * Loki: Update labels in log browser when time range changes in
    dashboard.
  * NGAlert: Send resolve signal to alertmanager on alerting -&gt;
    Normal.
  * PasswordField: Prevent a password from being displayed when
    you click the Enter button.
  * Renderer: Remove debug.log file when Grafana is stopped.
  * Security: Update dependencies to fix CVE-2021-36222,
    bsc#1188571.
- Update to version 8.1.0-beta3
  + Features and enhancements:
  * Alerting: Support label matcher syntax in alert rule list
    filter.
  * IconButton: Put tooltip text as aria-label.
  * Live: Experimental HA with Redis.
  * UI: FileDropzone component.
  * CloudWatch: Add AWS LookoutMetrics.
  + Bug fixes:
  * Docker: Fix builds by delaying go mod verify until all
    required files are copied over.
  * Exemplars: Fix disable exemplars only on the query that
    failed.
  * SQL: Fix SQL dataframe resampling (fill mode + time
    intervals).
- Update to version 8.1.0-beta2
  + Features and enhancements:
  * Alerting: Expand the value string in alert annotations and
    labels.
  * Auth: Add Azure HTTP authentication middleware.
  * Auth: Auth: Pass user role when using the authentication
    proxy.
  * Gazetteer: Update countries.json file to allow for linking to
    3-letter country codes.
  + Bug fixes:
  * Config: Fix Docker builds by correcting formatting in
    sample.ini.
  * Explore: Fix encoding of internal URLs.
- Update to version 8.1.0-beta1
  + Features and enhancements:
  * Alerting: Add Alertmanager notifications tab.
  * Alerting: Add button to deactivate current Alertmanager
    configuration.
  * Alerting: Add toggle in Loki/Prometheus data source
    configuration to opt out of alerting UI.
  * Alerting: Allow any "evaluate for" value &gt;=0 in the alert
    rule form.
  * Alerting: Load default configuration from status endpoint, if
    Cortex Alertmanager returns empty user configuration.
  * Alerting: view to display alert rule and its underlying data.
  * Annotation panel: Release the annotation panel.
  * Annotations: Add typeahead support for tags in built-in
    annotations.
  * AzureMonitor: Add curated dashboards for Azure services.
  * AzureMonitor: Add support for deep links to Microsoft Azure
    portal for Metrics.
  * AzureMonitor: Remove support for different credentials for
    Azure Monitor Logs.
  * AzureMonitor: Support querying any Resource for Logs queries.
  * Elasticsearch: Add frozen indices search support.
  * Elasticsearch: Name fields after template variables values
    instead of their name.
  * Elasticsearch: add rate aggregation.
  * Email: Allow configuration of content types for email
    notifications.
  * Explore: Add more meta information when line limit is hit.
  * Explore: UI improvements to trace view.
  * FieldOverrides: Added support to change display name in an
    override field and have it be matched by a later rule.
  * HTTP Client: Introduce dataproxy_max_idle_connections config
    variable.
  * InfluxDB: InfluxQL: adds tags to timeseries data.
  * InfluxDB: InfluxQL: make measurement search case insensitive.
    Legacy Alerting: Replace simplejson with a struct in webhook
    notification channel.
  * Legend: Updates display name for Last (not null) to just
    Last*.
  * Logs panel: Add option to show common labels.
  * Loki: Add $__range variable.
  * Loki: Add support for "label_values(log stream selector,
    label)" in templating.
  * Loki: Add support for ad-hoc filtering in dashboard.
  * MySQL Datasource: Add timezone parameter.
  * NodeGraph: Show gradient fields in legend.
  * PanelOptions: Don't mutate panel options/field config object
    when updating.
  * PieChart: Make pie gradient more subtle to match other
    charts.
  * Prometheus: Update PromQL typeahead and highlighting.
  * Prometheus: interpolate variable for step field.
  * Provisioning: Improve validation by validating across all
    dashboard providers.
  * SQL Datasources: Allow multiple string/labels columns with
    time series.
  * Select: Portal select menu to document.body.
  * Team Sync: Add group mapping to support team sync in the
    Generic OAuth provider.
  * Tooltip: Make active series more noticeable.
  * Tracing: Add support to configure trace to logs start and end
    time.
  * Transformations: Skip merge when there is only a single data
    frame.
  * ValueMapping: Added support for mapping text to color,
    boolean values, NaN and Null. Improved UI for value mapping.
  * Visualizations: Dynamically set any config (min, max, unit,
    color, thresholds) from query results.
  * live: Add support to handle origin without a value for the
    port when matching with root_url.
  + Bug fixes:
  * Alerting: Handle marshaling Inf values.
  * AzureMonitor: Fix macro resolution for template variables.
  * AzureMonitor: Fix queries with Microsoft.NetApp/../../volumes
    resources.
  * AzureMonitor: Request and concat subsequent resource pages.
  * Bug: Fix parse duration for day.
  * Datasources: Improve error handling for error messages.
  * Explore: Correct the functionality of shift-enter shortcut
    across all uses.
  * Explore: Show all dataFrames in data tab in Inspector.
  * GraphNG: Fix Tooltip mode 'All' for XYChart.
  * Loki: Fix highlight of logs when using filter expressions
    with backticks.
  * Modal: Force modal content to overflow with scroll.
  * Plugins: Ignore symlinked folders when verifying plugin
    signature.
  + Plugin development fixes &amp; changes:
  * Toolkit: Improve error messages when tasks fail.
- Update to version 8.0.7
  + Security: Fixes CVE-2021-43798.
- Update to version 8.0.6
  + Features and enhancements:
  * Alerting: Add annotation upon alert state change.
  * Alerting: Allow space in label and annotation names.
  * InfluxDB: Improve legend labels for InfluxDB query results.
  + Bug fixes:
  * Alerting: Fix improper alert by changing the handling of
    empty labels.
  * CloudWatch/Logs: Reestablish Cloud Watch alert behavior.
  * Dashboard: Avoid migration breaking on fieldConfig without
    defaults field in folded panel.
  * DashboardList: Fix issue not re-fetching dashboard list after
    variable change.
  * Database: Fix incorrect format of isolation level
    configuration parameter for MySQL.
  * InfluxDB: Correct tag filtering on InfluxDB data.
  * Links: Fix links that caused a full page reload.
  * Live: Fix HTTP error when InfluxDB metrics have an incomplete
    or asymmetrical field set.
  * Postgres/MySQL/MSSQL: Change time field to "Time" for time
    series queries.
  * Postgres: Fix the handling of a null return value in query
    results.
  * Tempo: Show hex strings instead of uints for IDs.
  * TimeSeries: Improve tooltip positioning when tooltip
    overflows.
  * Transformations: Add 'prepare time series' transformer.
- Update to version 8.0.5
  + Features and enhancements:
  * Cloudwatch Logs: Send error down to client.
  * Folders: Return 409 Conflict status when folder already
    exists.
  * TimeSeries: Do not show series in tooltip if it's hidden in
    the viz.
  + Bug fixes:
  * AzureMonitor: Fix issue where resource group name is missing
    on the resource picker button.
  * Chore: Fix AWS auth assuming role with workspace IAM.
  * DashboardQueryRunner: Fixes unrestrained subscriptions being
    created.
  * DateFormats: Fix reading correct setting key for
    use_browser_locale.
  * Links: Fix links to other apps outside Grafana when under sub
    path.
  * Snapshots: Fix snapshot absolute time range issue.
  * Table: Fix data link color.
  * Time Series: Fix X-axis time format when tick increment is
    larger than a year.
  * Tooltip Plugin: Prevent tooltip render if field is undefined.
- Update to version 8.0.4
  + Features and enhancements:
  * Live: Rely on app url for origin check.
  * PieChart: Sort legend descending, update placeholder.
  * TimeSeries panel: Do not reinitialize plot when thresholds
    mode change.
  + Bug fixes:
  * Elasticsearch: Allow case sensitive custom options in
    date_histogram interval.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * Explore: Fix import of queries between SQL data sources.
  * InfluxDB: InfluxQL query editor: fix retention policy
    handling.
  * Loki: Send correct time range in template variable queries.
  * TimeSeries: Preserve RegExp series overrides when migrating
    from old graph panel.
- Update to version 8.0.3
  + Features and enhancements:
  * Alerting: Increase alertmanager_conf column if MySQL.
  * Time series/Bar chart panel: Handle infinite numbers as nulls
    when converting to plot array.
  * TimeSeries: Ensure series overrides that contain color are
    migrated, and migrate the previous fieldConfig when changing
    the panel type.
  * ValueMappings: Improve singlestat value mappings migration.
  + Bug fixes:
  * Annotations: Fix annotation line and marker colors.
  * AzureMonitor: Fix KQL template variable queries without
    default workspace.
  * CloudWatch/Logs: Fix missing response data for log queries.
  * Elasticsearch: Restore previous field naming strategy when
    using variables.
  * LibraryPanels: Fix crash in library panels list when panel
    plugin is not found.
  * LogsPanel: Fix performance drop when moving logs panel in
    dashboard.
  * Loki: Parse log levels when ANSI coloring is enabled.
  * MSSQL: Fix issue with hidden queries still being executed.
  * PanelEdit: Display the VisualizationPicker that was not
    displayed if a panel has an unknown panel plugin.
  * Plugins: Fix loading symbolically linked plugins.
  * Prometheus: Fix issue where legend name was replaced with
    name Value in stat and gauge panels.
  * State Timeline: Fix crash when hovering over panel.
- Update to version 8.0.2
  + Features and enhancements:
  * Datasource: Add support for max_conns_per_host in dataproxy
    settings.
  + Bug fixes:
  * Configuration: Fix changing org preferences in FireFox.
  * PieChart: Fix legend dimension limits.
  * Postgres/MySQL/MSSQL: Fix panic in concurrent map writes.
  * Variables: Hide default data source if missing from regex.
- Update to version 8.0.1
  + Bug fixes:
  * Alerting/SSE: Fix "count_non_null" reducer validation.
  * Cloudwatch: Fix duplicated time series.
  * Cloudwatch: Fix missing defaultRegion.
  * Dashboard: Fix Dashboard init failed error on dashboards with
    old singlestat panels in collapsed rows.
  * Datasource: Fix storing timeout option as numeric.
  * Postgres/MySQL/MSSQL: Fix annotation parsing for empty
    responses.
  * Postgres/MySQL/MSSQL: Numeric/non-string values are now
    returned from query variables.
  * Postgres: Fix an error that was thrown when the annotation
    query did not return any results.
  * StatPanel: Fix an issue with the appearance of the graph when
    switching color mode.
  * Visualizations: Fix an issue in the
    Stat/BarGauge/Gauge/PieChart panels where all values mode
    were showing the same name if they had the same value.
  + Plugin development fixes &amp; changes:
  * Toolkit: Resolve external fonts when Grafana is served from a
    sub path.
- Update to version 8.0.0
  + Breaking changes:
  * The following endpoints were deprecated for Grafana v5.0 and
    support for them has now been removed:
    GET /dashboards/db/:slug
    GET /dashboard-solo/db/:slug
    GET /api/dashboard/db/:slug
    DELETE /api/dashboards/db/:slug
  + Features and enhancements:
  * AzureMonitor: Require default subscription for workspaces()
    template variable query.
  * AzureMonitor: Use resource type display names in the UI.
  * Dashboard: Remove support for loading and deleting dashboard
    by slug.
  * InfluxDB: Deprecate direct browser access in data source.
  * VizLegend: Add a read-only property.
  + Bug fixes:
  * AzureMonitor: Fix Azure Resource Graph queries in Azure
    China.
  * Checkbox: Fix vertical layout issue with checkboxes due to
    fixed height.
  * Dashboard: Fix Table view when editing causes the panel data
    to not update.
  * Dashboard: Fix issues where unsaved-changes warning is not
    displayed.
  * Login: Fixes Unauthorized message showing when on login page
    or snapshot page.
  * NodeGraph: Fix sorting markers in grid view.
  * Short URL: Include orgId in generated short URLs.
  * Variables: Support raw values of boolean type.
- Update to version 8.0.0-beta3
  + Breaking changes:
  * The default HTTP method for Prometheus data source is now
    POST.
  + Features and enhancements:
  * API: Support folder UID in dashboards API.
  * Alerting: Add support for configuring avatar URL for the
    Discord notifier.
  * Alerting: Clarify that Threema Gateway Alerts support only
    Basic IDs.
  * Azure: Expose Azure settings to external plugins.
  * AzureMonitor: Deprecate using separate credentials for Azure
    Monitor Logs.
  * AzureMonitor: Display variables in resource picker for Azure
    Monitor Logs.
  * AzureMonitor: Hide application insights for data sources not
    using it.
  * AzureMonitor: Support querying subscriptions and resource
    groups in Azure Monitor Logs.
  * AzureMonitor: remove requirement for default subscription.
  * CloudWatch: Add Lambda@Edge Amazon CloudFront metrics.
  * CloudWatch: Add missing AWS AppSync metrics.
  * ConfirmModal: Auto focus delete button.
  * Explore: Add caching for queries that are run from logs
    navigation.
  * Loki: Add formatting for annotations.
  * Loki: Bring back processed bytes as meta information.
  * NodeGraph: Display node graph collapsed by default with trace
    view.
  * Overrides: Include a manual override option to hide something
    from visualization.
  * PieChart: Support row data in pie charts.
  * Prometheus: Update default HTTP method to POST for existing
    data sources.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  + Bug fixes:
  * Admin: Fix infinite loading edit on the profile page.
  * Color: Fix issues with random colors in string and date
    fields.
  * Dashboard: Fix issue with title or folder change has no
    effect after exiting settings view.
  * DataLinks: Fix an issue __series.name is not working in data
    link.
  * Datasource: Fix dataproxy timeout should always be applied
    for outgoing data source HTTP requests.
  * Elasticsearch: Fix NewClient not passing httpClientProvider
    to client impl.
  * Explore: Fix Browser title not updated on Navigation to
    Explore.
  * GraphNG: Remove fieldName and hideInLegend properties from
    UPlotSeriesBuilder.
  * OAuth: Fix fallback to auto_assign_org_role setting for Azure
    AD OAuth when no role claims exists.
  * PanelChrome: Fix issue with empty panel after adding a non
    data panel and coming back from panel edit.
  * StatPanel: Fix data link tooltip not showing for single
    value.
  * Table: Fix sorting for number fields.
  * Table: Have text underline for datalink, and add support for
    image datalink.
  * Time series panel: Position tooltip correctly when window is
    scrolled or resized.
  * Transformations: Prevent FilterByValue transform from
    crashing panel edit.
- Update to version 8.0.0-beta2
  + Features and enhancements:
  * AppPlugins: Expose react-router to apps.
  * AzureMonitor: Add Azure Resource Graph.
  * AzureMonitor: Managed Identity configuration UI.
  * AzureMonitor: Token provider with support for Managed
    Identities.
  * AzureMonitor: Update Logs workspace() template variable query
    to return resource URIs.
  * BarChart: Value label sizing.
  * CloudMonitoring: Add support for preprocessing.
  * CloudWatch: Add AWS/EFS StorageBytes metric.
  * CloudWatch: Allow use of missing AWS namespaces using custom
    metrics.
  * Datasource: Shared HTTP client provider for core backend data
    sources and any data source using the data source proxy.
  * InfluxDB: InfluxQL: allow empty tag values in the query
    editor.
  * Instrumentation: Instrument incoming HTTP request with
    histograms by default.
  * Library Panels: Add name endpoint &amp; unique name validation to
    AddLibraryPanelModal.
  * Logs panel: Support details view.
  * PieChart: Always show the calculation options dropdown in the
    editor.
  * PieChart: Remove beta flag.
  * Plugins: Enforce signing for all plugins.
  * Plugins: Remove support for deprecated backend plugin
    protocol version.
  * Tempo/Jaeger: Add better display name to legend.
  * Timeline: Add time range zoom.
  * Timeline: Adds opacity &amp; line width option.
  * Timeline: Value text alignment option.
  * ValueMappings: Add duplicate action, and disable dismiss on
    backdrop click.
  * Zipkin: Add node graph view to trace response.
  + Bug fixes:
  * Annotations panel: Remove subpath from dashboard links.
  * Content Security Policy: Allow all image sources by default.
  * Content Security Policy: Relax default template wrt. loading
    of scripts, due to nonces not working.
  * Datasource: Fix tracing propagation for alert execution by
    introducing HTTP client outgoing tracing middleware.
  * InfluxDB: InfluxQL always apply time interval end.
  * Library Panels: Fixes "error while loading library panels".
  * NewsPanel: Fixes rendering issue in Safari.
  * PanelChrome: Fix queries being issued again when scrolling in
    and out of view.
  * Plugins: Fix Azure token provider cache panic and auth param
    nil value.
  * Snapshots: Fix key and deleteKey being ignored when creating
    an external snapshot.
  * Table: Fix issue with cell border not showing with colored
    background cells.
  * Table: Makes tooltip scrollable for long JSON values.
  * TimeSeries: Fix for Connected null values threshold toggle
    during panel editing.
  * Variables: Fixes inconsistent selected states on dashboard
    load.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * QueryField: Remove carriage return character from pasted text.
- Update to version 8.0.0-beta1
  + License update:
  * AGPL License: Update license from Apache 2.0 to the GNU
    Affero General Public License (AGPL).
  + Breaking changes:
  * Removes the never refresh option for Query variables.
  * Removes the experimental Tags feature for Variables.
  + Deprecations:
  * The InfoBox &amp; FeatureInfoBox are now deprecated please use
    the Alert component instead with severity info.
  + Features and enhancements:
  * API: Add org users with pagination.
  * API: Return 404 when deleting nonexistent API key.
  * API: Return query results as JSON rather than base64 encoded
    Arrow.
  * Alerting: Allow sending notification tags to Opsgenie as
    extra properties.
  * Alerts: Replaces all uses of InfoBox &amp; FeatureInfoBox with
    Alert.
  * Auth: Add support for JWT Authentication.
  * AzureMonitor: Add support for
    Microsoft.SignalRService/SignalR metrics.
  * AzureMonitor: Azure settings in Grafana server config.
  * AzureMonitor: Migrate Metrics query editor to React.
  * BarChart panel: enable series toggling via legend.
  * BarChart panel: Adds support for Tooltip in BarChartPanel.
  * PieChart panel: Change look of highlighted pie slices.
  * CloudMonitoring: Migrate config editor from angular to react.
  * CloudWatch: Add Amplify Console metrics and dimensions.
  * CloudWatch: Add missing Redshift metrics to CloudWatch data
    source.
  * CloudWatch: Add metrics for managed RabbitMQ service.
  * DashboardList: Enable templating on search tag input.
  * Datasource config: correctly remove single custom http
    header.
  * Elasticsearch: Add generic support for template variables.
  * Elasticsearch: Allow omitting field when metric supports
    inline script.
  * Elasticsearch: Allow setting a custom limit for log queries.
  * Elasticsearch: Guess field type from first non-empty value.
  * Elasticsearch: Use application/x-ndjson content type for
    multisearch requests.
  * Elasticsearch: Use semver strings to identify ES version.
  * Explore: Add logs navigation to request more logs.
  * Explore: Map Graphite queries to Loki.
  * Explore: Scroll split panes in Explore independently.
  * Explore: Wrap each panel in separate error boundary.
  * FieldDisplay: Smarter naming of stat values when visualising
    row values (all values) in stat panels.
  * Graphite: Expand metric names for variables.
  * Graphite: Handle unknown Graphite functions without breaking
    the visual editor.
  * Graphite: Show graphite functions descriptions.
  * Graphite: Support request cancellation properly (Uses new
    backendSrv.fetch Observable request API).
  * InfluxDB: Flux: Improve handling of complex
    response-structures.
  * InfluxDB: Support region annotations.
  * Inspector: Download logs for manual processing.
  * Jaeger: Add node graph view for trace.
  * Jaeger: Search traces.
  * Loki: Use data source settings for alerting queries.
  * NodeGraph: Exploration mode.
  * OAuth: Add support for empty scopes.
  * PanelChrome: New logic-less emotion based component with no
    dependency on PanelModel or DashboardModel.
  * PanelEdit: Adds a table view toggle to quickly view data in
    table form.
  * PanelEdit: Highlight matched words when searching options.
  * PanelEdit: UX improvements.
  * Plugins: PanelRenderer and simplified QueryRunner to be used
    from plugins.
  * Plugins: AuthType in route configuration and params
    interpolation.
  * Plugins: Enable plugin runtime install/uninstall
    capabilities.
  * Plugins: Support set body content in plugin routes.
  * Plugins: Introduce marketplace app.
  * Plugins: Moving the DataSourcePicker to grafana/runtime so it
    can be reused in plugins.
  * Prometheus: Add custom query params for alert and exemplars
    queries.
  * Prometheus: Use fuzzy string matching to autocomplete metric
    names and label.
  * Routing: Replace Angular routing with react-router.
  * Slack: Use chat.postMessage API by default.
  * Tempo: Search for Traces by querying Loki directly from
    Tempo.
  * Tempo: Show graph view of the trace.
  * Themes: Switch theme without reload using global shortcut.
  * TimeSeries panel: Add support for shared cursor.
  * TimeSeries panel: Do not crash the panel if there is no time
    series data in the response.
  * Variables: Do not save repeated panels, rows and scopedVars.
  * Variables: Removes experimental Tags feature.
  * Variables: Removes the never refresh option.
  * Visualizations: Unify tooltip options across visualizations.
  * Visualizations: Refactor and unify option creation between
    new visualizations.
  * Visualizations: Remove singlestat panel.
  + Bug fixes:
  * APIKeys: Fixes issue with adding first api key.
  * Alerting: Add checks for non supported units - disable
    defaulting to seconds.
  * Alerting: Fix issue where Slack notifications won't link to
    user IDs.
  * Alerting: Omit empty message in PagerDuty notifier.
  * AzureMonitor: Fix migration error from older versions of App
    Insights queries.
  * CloudWatch: Fix AWS/Connect dimensions.
  * CloudWatch: Fix broken AWS/MediaTailor dimension name.
  * Dashboards: Allow string manipulation as advanced variable
    format option.
  * DataLinks: Includes harmless extended characters like
    Cyrillic characters.
  * Drawer: Fixes title overflowing its container.
  * Explore: Fix issue when some query errors were not shown.
  * Generic OAuth: Prevent adding duplicated users.
  * Graphite: Handle invalid annotations.
  * Graphite: Fix autocomplete when tags are not available.
  * InfluxDB: Fix Cannot read property 'length' of undefined in
    when parsing response.
  * Instrumentation: Enable tracing when Jaeger host and port are
    set.
  * Instrumentation: Prefix metrics with grafana.
  * MSSQL: By default let driver choose port.
  * OAuth: Add optional strict parsing of role_attribute_path.
  * Panel: Fixes description markdown with inline code being
    rendered on newlines and full width.
  * PanelChrome: Ignore data updates &amp; errors for non data
    panels.
  * Permissions: Fix inherited folder permissions can prevent new
    permissions being added to a dashboard.
  * Plugins: Remove pre-existing plugin installs when installing
    with grafana-cli.
  * Plugins: Support installing to folders with whitespace and
    fix pluginUrl trailing and leading whitespace failures.
  * Postgres/MySQL/MSSQL: Don't return connection failure details
    to the client.
  * Postgres: Fix ms precision of interval in time group macro
    when TimescaleDB is enabled.
  * Provisioning: Use dashboard checksum field as change
    indicator.
  * SQL: Fix so that all captured errors are returned from sql
    engine.
  * Shortcuts: Fixes panel shortcuts so they always work.
  * Table: Fixes so border is visible for cells with links.
  * Variables: Clear query when data source type changes.
  * Variables: Filters out builtin variables from unknown list.
  * Variables: Refreshes all panels even if panel is full screen.
  + Plugin development fixes &amp; changes:
  * Button: Introduce buttonStyle prop.
  * DataQueryRequest: Remove deprecated props showingGraph and
    showingTabel and exploreMode.
  * grafana/ui: Update React Hook Form to v7.
  * IconButton: Introduce variant for red and blue icon buttons.
  * Plugins: Expose the getTimeZone function to be able to get
    the current selected timeZone.
  * TagsInput: Add className to TagsInput.
  * VizLegend: Move onSeriesColorChanged to PanelContext
    (breaking change).
- Update to version 7.5.13
  + Bug fixes:
  * Alerting: Fix NoDataFound for alert rules using AND operator.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1644408000">- Update to version 8.3.5 (jsc#SLE-23439, jsc#SLE-23422,
  jsc#SLE-24565)
  + Security:
  * Fixes XSS vulnerability in handling data sources
    (bsc#1195726, CVE-2022-21702)
  * Fixes cross-origin request forgery vulnerability
    (bsc#1195727, CVE-2022-21703)
  * Fixes Insecure Direct Object Reference vulnerability in Teams
    API (bsc#1195728, CVE-2022-21713)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1649332800">- Update _constraints to require at least 5GB, because with less we
  can't build it.</changelog>
  <changelog author="witold.bedyk@suse.com" date="1660219200">- Update to version 8.3.10
  + Security:
  * Fixes XSS vulnerability in the Unified Alerting
    (bsc#1201535, CVE-2022-31097)
  * Fixes OAuth account takeover vulnerability
    (bsc#1201539, CVE-2022-31107)
- Update to version 8.3.9
  + Bug fixes:
  * Geomap: Display legend
  * Prometheus: Fix timestamp truncation
- Update to version 8.3.7
  + Bug fix:
  * Provisioning: Ensure that the default value for orgID is set
    when provisioning datasources to be deleted.
- Update to version 8.3.6
  + Features and enhancements:
  * Cloud Monitoring: Reduce request size when listing labels.
  * Explore: Show scalar data result in a table instead of graph.
  * Snapshots: Updates the default external snapshot server URL.
  * Table: Makes footer not overlap table content.
  * Tempo: Add request histogram to service graph datalink.
  * Tempo: Add time range to tempo search query behind a feature flag.
  * Tempo: Auto-clear results when changing query type.
  * Tempo: Display start time in search results as relative time.
  + Bug fixes:
  * CloudMonitoring: Fix resource labels in query editor.
  * Cursor sync: Apply the settings without saving the dashboard.
  * LibraryPanels: Fix for Error while cleaning library panels.
  * Logs Panel: Fix timestamp parsing for string dates without timezone.
  * Prometheus: Fix some of the alerting queries that use reduce/math operation.
  * TablePanel: Fix ad-hoc variables not working on default datasources.
  * Text Panel: Fix alignment of elements.
  * Variables: Fix for constant variables in self referencing links.</changelog>
  <changelog author="marius.kittler@suse.com" date="1661428800">- Update to version 8.5.10
  + Bug fixes (8.5.10):
  * RBAC: Fix Anonymous Editors missing dashboard controls.
    [#52649], @gamab
  + Bug fixes (8.5.9):
  * Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    [#52238], @xlson
  + Bug fixes (8.5.6):
  * Dashboard: Fixes random scrolling on time range change.
    [#50379], @torkelo
  * Security: Fixes minor code scanning security warnings in old
    vendored javascript libs. #50382, @torkelo
  + Features and enhancements (8.5.5):
  * Azure Monitor: Include datasource ref when interpolating
    variables. #49543, @kevinwcyu
  * CloudWatch: Add multi-value template variable support for log
    group names in logs query builder. #49737, @kevinwcyu
  * Cloudwatch: Add template variable query function for listing
    log groups. #50100, @yaelleC
  + Bug fixes (8.5.5):
  * Alerting: Do not overwrite existing alert rule condition.
    [#49920], @gillesdemey
  * Alerting: Remove double quotes from matchers. #50044,
    @alexweav
  + Features and enhancements (8.5.4):
  * Alerting: Remove disabled flag for data source when migrating
    alerts. #48559, @yuri-tceretian
  * Alerting: Show notification tab of legacy alerting only to
    editor. #49624, @yuri-tceretian
  * Alerting: Update migration to migrate only alerts that belong
    to existing org\dashboard. #49192, @yuri-tceretian
  * AzureMonitor: Do not quote variables when a custom "All"
    variable option is used. #49428, @andresmgot
  * AzureMonitor: Update allowed namespaces. #48468,
    @jcolladokuri
  * CloudMonitor: Correctly encode default project response.
    [#49510], @aangelisc
  * Cloudwatch: Add support for new AWS/RDS EBS* metrics.
    [#48798], @szymonpk
  * InfluxDB: Use backend for influxDB by default via feature
    toggle. #48453, @yesoreyeram
  * Legend: Use correct unit for percent and count calculations.
    [#49004], @dprokop
  * LokI: use millisecond steps in Grafana 8.5.x. #48630, @gabor
  * Plugins: Introduce HTTP 207 Multi Status response to
    api/ds/query. #48550, @wbrowne
  * Transformations: Add an All Unique Values Reducer. #48653,
    @josiahg
  * Transformers: avoid error when the ExtractFields source field
    is missing. #49368, @wardbekker
  * [v8.5.x] Alerting: Update migration to migrate only alerts
    that belong to existing org\dashboard. #49199, @grafanabot
  + Bug fixes (8.5.4):
  * Alerting: Allow disabling override timings for notification
    policies. #48648, @gillesdemey
  * Alerting: Allow serving images from custom url path. #49022,
    @gillesdemey
  * Alerting: Apply Custom Headers to datasource queries. #47860,
    @joeblubaugh
  * Alerting: Fix RBAC actions for notification policies. #49185,
    @yuri-tceretian
  * Alerting: Fix access to alerts for viewer with editor
    permissions when RBAC is disabled. #49270, @yuri-tceretian
  * Alerting: Fix anonymous access to alerting. #49203,
    @yuri-tceretian
  * Alerting: correctly show all alerts in a folder. #48684,
    @gillesdemey
  * AzureMonitor: Fixes metric definition for Azure Storage
    queue/file/blob/table resources. #49101, @aangelisc
  * Dashboard: Fix dashboard update permission check. #48746,
    @IevaVasiljeva
  * DashboardExport: Fix exporting and importing dashboards where
    query data source ended up as incorrect. #48410, @torkelo
  * FileUpload: clicking the Upload file button now opens their
    modal correctly. #48766, @ashharrison90
  * GrafanaUI: Fix color of links in error Tooltips in light
    theme. #49327, @joshhunt
  * LibraryPanels: Fix library panels not connecting properly in
    imported dashboards. #49161, @joshhunt
  * Loki: Improve unpack parser handling. #49074, @gabor
  * RolePicker: Fix menu position on smaller screens. #48429,
    @Clarity-89
  * TimeRange: Fixes updating time range from url and browser
    history. #48657, @torkelo
  * TimeSeries: Fix detection &amp; rendering of sparse datapoints.
    [#48841], @leeoniya
  * Timeseries: Fix outside range stale state. #49633, @ryantxu
  * Tooltip: Fix links not legible in Tooltips when using light
    theme. #48748, @joshhunt
  * Tooltip: Sort decimals using standard numeric compare.
    [#49084], @dprokop
  * Transforms: Labels to fields, fix label picker layout.
    [#49304], @torkelo
  * Variables: Fixes issue with data source variables not
    updating queries with variable. #49478, @torkelo
  * [v8.5.x] Alerting: Fix RBAC actions for notification policies
    (#49185). #49348, @yuri-tceretian
  * [v8.5.x] Alerting: Fix access to alerts for viewer with
    editor permissions when RBAC is disabled. #49427, @konrad147
  * [v8.5.x] Alerting: Fix anonymous access to alerting. #49268,
    @yuri-tceretian
  + Breaking changes (8.5.4):
    For a data source query made via /api/ds/query:
    If the DatasourceQueryMultiStatus feature is enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is now 207
    Multi Status instead of 400 Bad gateway
    If the DatasourceQueryMultiStatus feature is not enabled and
    The data source response has an error set as part of the
    DataResponse, the resulting HTTP status code is 400 Bad
    Request (no breaking change)
  - -&gt; Issue #48550
  + Bug fixes (8.5.3):
  * Security: fixes CVE-2022-29170. #49240, @xlson
  + Features and enhancements (8.5.2):
  * Alerting: Add safeguard for migrations that might cause
    dataloss. #48526, @JohnnyQQQQ
  * AzureMonitor: Add support for not equals and startsWith
    operators when creating Azure Metrics dimension filters.
    [#48077], @aangelisc
  * Elasticsearch: Add deprecation notice for &lt; 7.10 versions.
    [#48506], @ivanahuckova
  * Traces: Filter by service/span name and operation in Tempo
    and Jaeger. #48209, @joey-grafana
  + Bug fixes (8.5.2):
  * AzureAd Oauth: Fix strictMode to reject users without an
    assigned role. #48474, @kyschouv
  * CloudWatch: Fix variable query tag migration. #48587, @iwysiu
  * Plugins: Ensure catching all appropriate 4xx api/ds/query
    scenarios. #47565, @wbrowne
  + Bug fixes (8.5.1):
  * Azure Monitor: Fix space character encoding for metrics query
    link to Azure Portal. #48139, @kevinwcyu
  * CloudWatch: Prevent log groups from being removed on query
    change. #47994, @asimpson
  * Cloudwatch: Fix template variables in variable queries.
    [#48140], @iwysiu
  * Explore: Prevent direct access to explore if disabled via
    feature toggle. #47714, @Elfo404
  * InfluxDB: Fixes invalid no data alerts. #48295, @yesoreyeram
  * Navigation: Prevent navbar briefly showing on login. #47968,
    @ashharrison90
  * Plugins Catalog: Fix styling of hyperlinks. #48196, @marefr
  * Table: Fix filter crashes table. #48258, @zoltanbedi
  * TimeSeries: Properly stack series with missing datapoints.
    [#48321], @leeoniya
  + Features and enhancements (8.5.0):
  * Alerting: Add contact points provisioning API. #47197,
    @JohnnyQQQQ
  * Alerting: Add resolved count to notification title when both
    firing and resolved present. #46697, @JacobsonMT
  * Alerting: Alert rule should wait For duration when execution
    error state is Alerting. #47052, @grobinson-grafana
  * Alerting: Classic conditions can now display multiple values.
    [#46971], @gotjosh
  * Alerting: Display query from grafana-managed alert rules on
    /api/v1/rules. #45969, @gotjosh
  * Alerting: Enhance support for arbitrary group names in
    managed alerts. #47785, @gillesdemey
  * Alerting: add field for custom slack endpoint. #45751,
    @nathanrodman
  * Azure Monitor : Adding json formatting of error messages in
    Panel Header Corner and Inspect Error Tab. #44877, @yaelleC
  * Azure Monitor: Add 2 more Curated Dashboards for VM Insights.
    [#45187], @jcolladokuri
  * CloudWatch: Handle new error codes for MetricInsights.
    [#47033], @Gabrielopesantos
  * Dashboards: show changes in save dialog. #46557, @ryantxu
  * DataSource: Default data source is no longer a persisted
    state but just the default data source for new panels.
    [#45132], @torkelo
  * DataSourcePlugin API: Allow queries import when changing data
    source type. #47435, @dprokop
  * Explore: Remove return to panel button. #45018, @gelicia
  * Explore: allow users to save Explore state to a new panel in
    a new dashboard. #45148, @Elfo404
  * Instrumentation: Proxy status code correction and various
    improvements. #47473, @marefr
  * Logging: Introduce feature toggle to activate gokit/log
    format. #47336, @ying-jeanne
  * NewsPanel: Add support for Atom feeds. #45390, @kaydelaney
  * Plugins: Add deprecation notice for /api/tsdb/query endpoint.
    [#45238], @wbrowne
  * Plugins: Adding support for traceID field to accept
    variables. #45559, @vinisdl
  * PostgreSQL: __unixEpochGroup to support arithmetic expression
    as argument. #46764, @s0nik42
  * Profile/Help: Expose option to disable profile section and
    help menu. #46308, @cameronwaterman
  * Prometheus: Enable new visual query builder by default.
    [#46634], @torkelo
  * SAML: Allow disabling of SAML signups. #47481, @mmandrus
  * SAML: Allow disabling of SAML signups. (Enterprise)
  * Table: New pagination option. #45732, @zoltanbedi
  * TablePanel: Add cell inspect option. #45620, @dprokop
  * Tempo / Trace Viewer: Support Span Links in Trace Viewer.
    [#45632], @Shachi16
  * Tempo: Download span references in data inspector. #47074,
    @connorlindsey
  * Tempo: Separate trace to logs and loki search datasource
    config. #46655, @connorlindsey
  * Trace View: Show number of child spans. #44393, @tharun208
  * Transformations: Support escaped characters in key-value pair
    parsing. #47901, @aangelisc
  + Bug fixes (8.5.0):
  * Azure Monitor: Bug Fix for incorrect variable cascading for
    template variables. #47478, @jcolladokuri
  * CloudWatch: List all metrics properly in SQL autocomplete.
    [#45898], @sunker
  * CloudWatch: Run query on blur in logs query field. #47454,
    @fridgepoet
  * Dashboard: Template variables are now correctly persisted
    when clicking breadcrumb links. #46790, @ashharrison90
  * DashboardPage: Remember scroll position when coming back
    panel edit / view panel. #47639, @torkelo
  * Panel Edit: Options search now works correctly when a
    logarithmic scale option is set. #47927, @ashharrison90
  * Postgres: Return tables with hyphenated schemes. #45754,
    @zuchka
  * Table panel: Fix horizontal scrolling when pagination is
    enabled. #47776, @dprokop
  * Variables: Ensure variables in query params are correctly
    recognised. #47049, @ashharrison90
  * Variables: Fix crash when changing query variable datasource.
    [#44957], @joshhunt
  * Visualizations: Stack negative-valued series downwards.
    [#47373], @leeoniya
  + Breaking changes (8.5.0):
    For a proxied request, e.g. Grafana's datasource or plugin
    proxy: If the request is cancelled, e.g. from the browser/by
    the client, the HTTP status code is now 499 Client closed
    request instead of 502 Bad gateway If the request times out,
    e.g. takes longer time than allowed, the HTTP status code is
    now 504 Gateway timeout instead of 502 Bad gateway. Issue
    [#47473] The change in behavior is that negative-valued series
    are now stacked downwards from 0 (in their own stacks), rather
    than downwards from the top of the positive stacks. We now
    automatically group stacks by Draw style, Line interpolation,
    and Bar alignment, making it impossible to stack bars on top of
    lines, or smooth lines on top of stepped lines. Issue #47373
    The meaning of the default data source has now changed from
    being a persisted property in a panel. Before when you selected
    the default data source for a panel and later changed the
    default data source to another data source it would change all
    panels who were configured to use the default data source. From
    now on the default data source is just the default for new
    panels and changing the default will not impact any currently
    saved dashboards. Issue #45132 The Tooltip component provided
    by @grafana/ui is no longer automatically interactive (that is
    you can hover onto it and click a link or select text). It will
    from now on by default close automatically when you mouse out
    from the trigger element. To make tooltips behave like before
    set the new interactive property to true.
  + Deprecations (8.5.0):
    /api/tsdb/query API has been deprecated and will be removed in
    a future release. Use /api/ds/query instead. Issue #45238
  + Plugin development fixes &amp; changes (8.5.0):
  * Card: Increase clickable area when meta items are present.
    [#47935], @ashharrison90
  * Loki: Fix operator description propup from being shortened.
    [#46575], @glintik
  * Tooltips: Make tooltips non interactive by default. #45053,
    @torkelo
  + Features and enhancements (8.4.7):
  * CloudWatch: Added missing MemoryDB Namespace metrics. #47290,
    @james-deee
  * Histogram Panel: Take decimal into consideration. #47330,
    @mdvictor
  * TimeSeries: Sort tooltip values based on raw values. #46738,
    @dprokop
  + Bug fixes (8.4.7):
  * API: Include userId, orgId, uname in request logging
    middleware. #47183, @marefr
  * Elasticsearch: Respect maxConcurrentShardRequests datasource
    setting. #47120, @alexandrst88
  + Features and enhancements (8.4.5):
  * Instrumentation: Make backend plugin metrics endpoints
    available with optional authentication. #46467, @marefr
  * Table panel: Show datalinks for cell display modes JSON View
    and Gauge derivates. #46020, @mdvictor
  + Bug fixes (8.4.5):
  * Azure Monitor: Small bug fixes for Resource Picker. #46665,
    @sarahzinger
  * Logger: Use specified format for file logger. #46970, @sakjur
  * Logs: Handle missing fields in dataframes better. #46963,
    @gabor
  * ManageDashboards: Fix error when deleting all dashboards from
    folder view. #46877, @joshhunt
  + Features and enhancements (8.4.4):
  * Loki: Add unpack to autocomplete suggestions (#44623).
    [#46573], @glintik
  * Plugins: allow using both Function and Class components for
    app plugins. #46148, @leventebalogh
  * TimeSeries: Add migration for Graph panel's transform series
    override. #46577, @dprokop
  * TimeSeries: Preserve null/undefined values when performing
    negative y transform. #46584, @dprokop
  + Bug fixes (8.4.4):
  * CloudWatch: Use default http client from aws-sdk-go. #46370,
    @sunker
  * Dashboards: Fixes repeating by row and no refresh. #46565,
    @torkelo
  * Gauge: Fixes blank viz when data link exists and orientation
    was horizontal. #46335, @torkelo
  * Search: sort results correctly when using postgres. #46466,
    @xlson
  * TagsInput: fix tags remove button accessibility issues.
    [#46254], @Elfo404
  * TextPanel: Sanitize after markdown has been rendered to html.
    [#46166], @ashharrison90
  + Features and enhancements (8.4.3):
  * Alerting: Grafana uses &gt; instead of &gt;= when checking the For
    duration. #46010
  * Alerting: Use expanded labels in dashboard annotations.
    [#45726], @grobinson-grafana
  * Logs: Escape windows newline into single newline. #45771,
    @perosb
  + Bug fixes (8.4.3):
  * Alerting: Fix use of &gt; instead of &gt;= when checking the For
    duration. #46011, @grobinson-grafana
  * Azure Monitor: Fixes broken log queries that use workspace.
    [#45820], @sunker
  * CloudWatch: Remove error message when using multi-valued
    template vars in region field. #45886, @sunker
  * Middleware: Fix IPv6 host parsing in CSRF check. #45911,
    @ying-jeanne
  + Plugin development fixes &amp; changes (8.4.3):
  * ClipboardButton: Use a fallback when the Clipboard API is
    unavailable. #45831, @ashharrison90
  + Features and enhancements (8.4.2):
  * OAuth: Add setting to skip org assignment for external
    users. #34834, @baez90
  * Tracing: Add option to map tag names to log label names in
    trace to logs settings. #45178, @connorlindsey
  + Bug fixes (8.4.2):
  * Explore: Fix closing split pane when logs panel is
    used. #45602, @ifrost
  + Features and enhancements (8.4.1):
  * Cloudwatch: Add support for AWS/PrivateLink* metrics and
    dimensions. #45515, @szymonpk
  * Configuration: Add ability to customize okta login button
    name and icon. #44079, @DanCech
  * Tempo: Switch out Select with AsyncSelect component to get
    loading state in Tempo Search. #45110, @CatPerry
  + Bug fixes (8.4.1):
  * Alerting: Fix migrations by making send_alerts_to field
    nullable. #45572, @santihernandezc
  + Features and enhancements (8.4.0):
  * API: Extract OpenAPI specification from source code using
    go-swagger. #40528, @papagian
  * AccessControl: Disable user remove and user update roles when
    they do not have the permissions. #43429, @Jguer
  * AccessControl: Provisioning for teams. #43767, @gamab
  * API: Add usage stats preview endpoint. #43899, @Jguer
  * Alerting: Move slow queries in the scheduler to another
    goroutine. #44423, @grobinson-grafana
  * Alerting: Use time.Ticker instead of alerting.Ticker in
    ngalert. #44395, @grobinson-grafana
  * Alerting: add custom grouping to Alert Panel. #44559,
    @gillesdemey
  * Analytics: Add user id tracking to google analytics.
    [#42763], @autoric
  * Angular: Add AngularJS plugin support deprecation plan to
    docs site. #45149, @torkelo
  * Auth: implement auto_sign_up for auth.jwt. #43502, @sakjur
  * Azure Monitor Logs: Order subscriptions in resource picker by
    name. #45228, @sunker
  * Azure monitor Logs: Optimize data fetching in resource
    picker. #44549, @sunker
  * AzureMonitor: Filter list of resources by resourceType.
    [#43522], @andresmgot
  * BarChart: color by field, x time field, bar radius, label
    skipping. #43257, @leeoniya
  * Chore: Implement OpenTelemetry in Grafana. #42674, @idafurjes
  * Cloud Monitoring: Adds metric type to Metric drop down
    options. #43268, @tw1nk
  * CloudWatch: Add Data Lifecycle Manager metrics and dimension.
    [#43310], @ilyastoli
  * CloudWatch: Add Missing Elasticache Host-level metrics.
    [#43455], @dhendo
  * CloudWatch: Add all ElastiCache Redis Metrics. #43336,
    @siavashs
  * CloudWatch: Add new AWS/ES metrics. #43034, @sunker
  * Cloudwatch: Add syntax highlighting and autocomplete for
    "Metric Search". #43985, @sarahzinger
  * Explore: Support custom display label for exemplar links for
    Prometheus datasource. #42732, @JokerQueue
  * Hotkeys: Make time range absolute/permanent. #43802, @davkal
  * Playlists: Enable sharing direct links to playlists. #44161,
    @ashharrison90
  * SQLStore: Prevent concurrent migrations. #44101, @papagian
  * SSE: Add Mode to drop NaN/Inf/Null in Reduction operations.
    [#43583], @kylebrandt
  * Setting: Support configuring feature toggles with bools
    instead of just passing an array. #43326, @bergquist
  * TimeSeries: Add support for negative Y and constant
    transform. #44774, @dprokop
  * Transformations: Add 'JSON' field type to
    ConvertFieldTypeTransformer. #42624, @sd2k
  + Bug fixes (8.4.0):
  * Auth: Guarantee consistency of signed SigV4 headers.
    [#45054], @wbrowne
  * CloudWatch: Fix MetricName resetting on Namespace change.
    [#44165], @yaelleC
  * Cloudwatch : Fixed reseting metric name when changing
    namespace in Metric Query. #44612, @yaelleC
  * Explore: Avoid locking timepicker when range is inverted.
    [#44790], @Elfo404
  * Instrumentation: Fix HTTP request instrumentation of
    authentication failures. #44234, @marefr
  * LibraryPanels: Prevent long descriptions and names from
    obscuring the delete button. #45190, @zuchka
  * OAuth: Fix parsing of ID token if header contains non-string
    value. #44159, @marefr
  * Panel Edit: Visualization search now works correctly with
    special characters. #45137, @ashharrison90
  * Provisioning: Fix duplicate validation when multiple
    organizations have been configured. #44151, @marefr
  * QueryField: Fix issue with undo history when suggestion is
    inserted (#28656). #39114, @glintik
  * TablePanel: Do not prefix columns with frame name if multiple
    frames and override active. #45174, @mdvictor
  + Deprecations (8.4.0):
    AngularJS plugin support is now in a deprecated state, meaning
    it will be removed in a future release. Currently, that is
    planned for version 10 (in 2023). The documentation site has an
    article with more details on why, when, and how. Issue #45149</changelog>
  <changelog author="witold.bedyk@suse.com" date="1663761600">- Update to version 8.5.13 (jsc#PED-2145):
  + Features and enhancements:
  * Plugins: Expose emotion/react to plugins to prevent load
    failures
  + Bug fix:
  * AuthNZ: Security fixes for (bsc#1203596, CVE-2022-36062) and
    (bsc#1203597, CVE-2022-35957)
- Update to version 8.5.11:
  + Features and enhancements:
  * Rendering: Add support for renderer token
  * Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668168000">- Update to version 8.5.14:
  * Security: Fix do not forward login cookie in outgoing requests
    (bsc#1204303, CVE-2022-39201)
  * Security: Make proxy endpoints not leak sensitive HTTP headers
    (bsc#1204305, CVE-2022-31130)
  * Security: Fix plugin signature bypass (bsc#1204302, CVE-2022-31123)
  * Security: Fix blocknig other users from signing in (bsc#1204304,
    CVE-2022-39229)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1668772800">- Update to version 8.5.15 (jsc#PED-2617):
  * Security: Fix for privilege escalation
    (bsc#1205225, CVE-2022-39306)
  * Security: Omit error from http response when user does not
    exists (bsc#1205227, CVE-2022-39307)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1675684800">- Update to version 8.5.20:
  * Security: SVG: Add dompurify preprocessor step
    (bsc#1207749, CVE-2022-23552)
  * Security: Snapshots: Fix originalUrl spoof security issue
    (bsc#1207750, CVE-2022-39324)
  * Security: Omit error from http response
  * Bug fix: Email and username trimming and invitation validation</changelog>
  <changelog author="witold.bedyk@suse.com" date="1676462400">- Fix basic authentication bypass by updating the exporter toolkit
  to version 0.7.3 (bsc#1208065, CVE-2022-46146).
- Add:
  * 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Require Go 1.19 or newer (bsc#1208293, CVE-2022-41723)</changelog>
  <changelog author="witold.bedyk@suse.com" date="1678708800">- Update to version 8.5.21:
  * Apply attribute sanitation to GeomapPanel
    (bsc#1208821, CVE-2023-0507)
  * Avoid storing XSS in TraceView panel
    (bsc#1208819, CVE-2023-0594)
  * Login: Fix panic when UpsertUser is called without ReqContext</changelog>
  <changelog author="witold.bedyk@suse.com" date="1679572800">- Update to version 8.5.22:
  * Fix XSS in Graphite functions tooltip
    (bsc#1209645, CVE-2023-1410)</changelog>
  <changelog author="marius.kittler@suse.com" date="1679659200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
  as the exporter toolkit has been updated by upstream
- Install wrapper scripts under /usr/sbin
- Install actual binaries under /usr/libexec/grafana (or /usr/lib
  under older distributions) and create a simlink for wrapper
  scripts and the service (which expect the binary to be under
  /usr/share/grafana/bin)
- Update to 9.4.3
  * Bug fixes
    Alerting: Use background context for maintenance function.
- Update to 9.4.2
  * Bug fixes
    Alerting: Fix boolean default in migration from false to 0.
- Update to 9.4.0
  * Features and enhancements
    Alerting: Add endpoint for querying state history.
    Alerting: Add label query parameters to state history endpoint.
    Alerting: Add static label to all state history entries.
    Alerting: Mark AM configuration as applied.
    Azure Monitor: Enable multiple resource queries.
    InfluxDB: Move database information into jsondata.
    Query Caching: Add per-panel query caching TTL.
    Table: Add row number column option.
    Tempo: Remove tempoApmTable feature flag.
    Transformations: Selectively apply transformation to queries.
  * Bug fixes
    AccessControl: Clear user permission cache for update org user
    role.
    Alerting: Fix handling of special floating-point cases
    when writing observed values to annotations.
    Auth: Rotate token patch.
    ContextMenu: Consider y coord when determining bottom
    collision.
    Elasticsearch: Fix consistent label order in alerting.
    Explore: Fix graph not updating when changing config.
    Heatmap: Support heatmap rows with non-timeseries X axis.
    Login: Fix panic when a user is upserted by a background
    process.
    MSSQL: Add support for macro function calls.
    MySQL: Quote identifiers that include special characters.
    Navigation: Sign in button now works correctly when
    served under a sub path.
    Nested Folder: Fix for SQLite not to overwrite the parent on
    restarts.
    PanelChrome: Adds display mode to support transparent option.
    Plugins: Case-sensitive routes for standalone pages.
    Plugins: Prefer to use the data source UID when querying.
    SQLStore: Fix folder migration for MySQL &lt; 5.7.
    Search: Fix not being able to clear sort value.
    Tempo: Fix span name being dropped from the query.
  * Plugin development fixes &amp; changes
    PanelChrome: Implement hover header.
- Update to 9.3.7
  * Bug fixes
    Alerting: Validate that tags are 100 characters or less.
    Expressions: Fixes the issue showing expressions editor.
    Logs: Fix stats not being updated when log results change.
    Plugins: Fix circular reference in customOptions leading
    to MarshalJSON errors.
    Time Series Panel: Fix legend text selection in Firefox.
- Update to 9.3.6
  * Bug fixes
    QueryEditorRow: Fixes issue loading query editor when
    data source variable selected.
- Update to 9.3.4
  * Features and enhancements
    Prometheus: Add default editor configuration.
    TextPanel: Refactor to functional component.
  * Bug fixes
    Alerting: Fix webhook to use correct key for decrypting token.
    Alerting: Set error annotation on EvaluationError regardless of
    underlying error type.
    Datasources: Fix Proxy by UID Failing for UIDs with a Hyphen.
    Fix creating of span link with no tags.
    Elasticsearch: Fix failing requests when using SigV4.
    Elasticsearch: Fix toggle-settings are not shown correctly.
    Explore: Be sure time range key bindings are mounted after
    clear.
    Explore: Unsync time ranges when a pane is closed.
    Logs: Lines with long words do not break properly.
    Loki: Fix misaligned derived fields settings.
    Query Builder: Fix max width of input component to prevent
    overflows.
    Search: Auto focus input elements.
    Search: Fix empty folder message showing when by starred
    dashboards.
    Table Panel: Fix image of image cell overflowing table cell and
    cells ignoring text alignment setting when a data
    link is added.
- Update to 9.3.2
  * Features and enhancements
    Graphite: Process multiple queries to Graphite plugin.
  * Bug fixes
    API: Fix delete user failure due to quota not enabled.
    Accessibility: Improved keyboard accessibility in BarGauge.
    Accessibility: Improved keyboard accessibility in BigValue.
    Alerting: Use the QuotaTargetSrv instead of the QuotaTarget in
    quota check.
    AzureMonitor: Automate location retrieval.
    AzureMonitor: Fix bad request when setting dimensions.
    BarChart: Fix value mappings.
    Build: Streamline and sync dockerfiles.
    Build: Unified dockerfile for all builds.
    CloudWatch: Fix - make sure dimensions are propagated to alert
    query editor.
    Cloudwatch: Fix deeplink with default region.
    Command Palette: Fix not being able to type if triggered
    whilst another modal is open.
    Command Palette: Maintain page state when changing theme.
    Dashboards: Fix 'Make Editable' button not working in
    Dashboard Settings.
    Dashboards: Show error when data source is missing.
    Datasource: Fix - apply default query also to queries in new
    panels.
    Dropdown: Menu now closes correctly when selecting
    options on touch devices.
    Influx: Query segment menus now position correctly near
    the bottom of the screen.
    Login: Fix failure to login a new user via an external
    provider if quota are enabled.
    Loki/Prometheus: Fix wrong queries executed in split view.
    Loki: Fix wrongly escaped label values when using LabelFilter.
    Navigation: Prevent app crash when importing a dashboard with a
    uid of `home`.
    Panel Edit: Fix data links edit icons being off screen when
    provided title is too long.
    Prometheus: Fix exemplar fill color to match series color in
    time series.
    Prometheus: Fix exemplars not respecting corresponding series
    display status.
    StateTimeline: Fix negative infinity legend/tooltip from
    thresholds.
    Table: Fixes row border style not showing and colored
    rows blending together.
    Tempo: Fix TraceQL autocomplete issues.
    TimePicker: Prevent TimePicker overflowing viewport on small
    screens.
    TimeRangePicker: Fix recently ranges only not showing all recent
    ranges.
    TimeZonePicker: Scroll menu correctly when using keyboard
    controls.
- Update to 9.3.1
  * Features and enhancements
    Connections: Update "Your connections/Data sources" page.
  * Bug fixes
    Accessibility: Increase badge constrast to be WCAG AA compliant.
- Update to 9.3.0
  * Features and enhancements
    Alerting: Enable interpolation for notification policies in file
    provisioning.
    Azure Monitor Logs: Avoid warning when the response is empty.
    Azure Monitor: Add support to customized routes.
    Canvas: Add icon value mapping.
    CloudWatch: Cross-account querying support.
    Docs: Update `merge-pull-request.md` regarding backport
    policies.
    GaugePanel: Setting the neutral-point of a gauge.
    Geomap: Improve location editor.
    Internationalization: Enable internationalization by default.
    Logs: Add `Download logs` button to log log-browser.
    Loki: Add `gzip` compression to resource calls.
    Loki: Add improvements to loki label browser.
    Loki: Make label browser accessible in query builder.
    Loki: Remove raw query toggle.
    Middleware: Add CSP Report Only support.
    Navigation: Prevent viewer role accessing dashboard
    creation, import and folder creation.
    OAuth: Refactor OAuth parameters handling to support
    obtaining refresh tokens for Google OAuth.
    Oauth: Display friendly error message when
    role_attribute_strict=true and no valid role found.
    Preferences: Add confirmation modal when saving org preferences.
    PublicDashboards: Orphaned public dashboard deletion script
    added.
    Query Editor: Hide overflow for long query names.
    Solo Panel: Configurable timezone.
    TablePanel: Add support for Count calculation per column
    or per entire dataset.
    Tempo: Send the correct start time when making a TraceQL query.
    Various Panels: Remove beta label from Bar Chart, Candlestick,
    Histogram, State Timeline, &amp; Status History
    Panels.
  * Bug fixes
    Access Control: Clear user's permission cache after resource
    creation.
    Access Control: Clear user's permission cache after resource
    creation.
    Accessibility: Improve keyboard accessibility in
    `AnnoListPanel`.
    Accessibility: Improve keyboard accessibility in `Collapse`.
    Accessibility: Improve keyboard accessibility in
    `GettingStarted` panel.
    Accessibility: Improve keyboard accessibility of `FilterPill`.
    Admin: Fix broken links to image assets in email templates.
    Azure Monitor: Fix namespace selection for storageaccounts.
    Calcs: Fix difference percent in legend.
    DataLinks: Improve Data-Links AutoComplete Logic.
    Explore: Fix a11y issue with logs navigation buttons.
    Heatmap: Fix blurry text &amp; rendering.
    Heatmap: Fix tooltip y range of top and bottom buckets in
    calculated heatmaps.
    Logs: Fix misalignment of LogRows.
    Navigation: Stop clearing search state when opening a
    result in a new tab.
    OptionsUI: SliderValueEditor does not get auto focused on
    slider change.
    PanelEdit: Fixes bug with not remembering panel options
    pane collapse/expand state.
    Quota: Fix failure in store due to missing scope parameters.
    Quota: Fix failure when checking session limits.
    StateTimeline: Prevent label text from overflowing state rects.
    Tempo: Fix search table duration unit.
    TraceView: Fix broken rendering when scrolling in Dashboard
    panel in Firefox.
  * Plugin development fixes &amp; changes
    GrafanaUI: Add disabled option for menu items.
- Update to 9.2.4
  * Features and enhancements
    Access Control: Add an endpoint for setting several managed
    resource permissions.
    Accessibility: Increase `Select` placeholder contrast to
    be WCAG AA compliant.
    Alerting: Append org ID to alert notification URLs.
    Alerting: Make the Grouped view the default one for Rules.
    Build: Remove unnecessary alpine package updates.
    Google Cloud Monitoring: Set frame interval to draw null values.
    Instrumentation: Expose when the binary was built as a gauge.
    Loki: Preserve `X-ID-Token` header.
    Search: Reduce requests in folder view.
    TimeSeries: More thorough detection of negative values for
    auto-stacking direction.
  * Bug fixes
    Alerting: Attempt to preserve UID from migrated legacy channel.
    Alerting: Fix response is not returned for invalid Duration in
    Provisioning API.
    Alerting: Fix screenshot is not taken for stale series.
    Auth: Fix admins not seeing pending invites.
    MSSQL/Postgres: Fix visual query editor filter disappearing.
    Tempo: Fix dropdown issue on tag field focus.
    Timeseries: Fix null pointer when matching fill below to field.
  * Plugin development fixes &amp; changes
    Toolkit: Fix Webpack less-loader config.
- Update to 9.2.3
  * Features and enhancements
    Docs: Add information about DB version support to upgrade guide.
    Footer: Update footer release notes link to Github changelog.
    Prometheus: Do not drop errors in streaming parser.
    Prometheus: Flavor/version configuration.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    Security: Upgrade x/text to version unaffected by
    CVE-2022-32149.
  * Bug fixes
    Auth: Fix GF_AUTH_JWT_URL_LOGIN env variable doesn't work.
    Live: Explicitly reply with http 200.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Prometheus: Fix builder operation mode changing
    multiselect to single select behaviour.
    Security: Fix vulnerabilities in webpack loader-utils.
- Update to 9.2.2
  * Features and enhancements
    Alerting: Add support for wecom apiapp.
    Canvas: Improve resource picker initialization.
    Canvas: Improve text element readability.
    CloudWatch: Make sure adoption tracking is done on valid,
    migrated queries.
    Dashboard: Alerts user to incorrect tag format for JSON import.
    MSSQL: Support tables from all schemas.
    Opentsdb: Allow template variables for filter keys.
    Prometheus: Provide label values match parameter API when
    supported prometheus instance is configured.
    QueryEditor: Revert components from grafana-ui.
  * Bug fixes
    Browse: Fix General folder not showing in FolderPicker.
    Elasticsearch: Fix calculation of trimEdges in alert mode.
    Elasticsearch: Fix trimEdges delete logic in alert mode.
    GoogleOAuth: Unlock User Admin UI.
    LogContext: Fix wrong color of `show context` icon in light
    theme.
    Loki: Fix adding of adhoc filters to stream selector when query
    with empty stream selector.
    Loki: Fix double stringified log-lines when copied via Copy
    button.
    Loki: Fix explain section about $\_\_interval variable.
    Loki: Remove already selected options from next label filter
    options in builder.
    NodeGraph: Fix rendering issues when values of arc are over 1.
    PublicDashboards: Fix hidden queries execution.
    PublicDashboards: Fix hidden queries execution.
    Tempo: Fix Node Graph visualization type in dashboard.
    TimeSeries: Fix stacking when first value is negative zero.
    TimeseriesPanel: Fix variables in data links.
    User: Fix externalUserId not being populated.
  * Breaking changes
    We added some components a bit too early to @grafana/ui in 9.2
    so we are moving them back to @grafana/experimental. If you
    used any of these components
    AccessoryButton
    EditorFieldGroup
    EditorHeader
    EditorField
    EditorRow
    EditorList
    EditorRows
    EditorSwitch
    FlexItem
    Stack
    InlineSelect
    InputGroup
    Space
    Please use them from grafana/experimental from now on.
- Update to 9.2.1
  * Features and enhancements
    Alerting: Improve notification policies created during
    migration.
    AzureAD: Add option to force fetch the groups from the
    Graph API.
    Docs: Note end of release notes publication.
    Inspect: Handle JSON tab crash when the provided object
    is too big to stringify.
    TablePanel: Footer now updates values on column filtering.
  * Bug fixes
    Alerting: Fix email image embedding on Windows.
    Alerting: Fix mathexp.NoData for ConditionsCmd.
    Legacy Alerting: Fix duration calculation when testing a rule.
    Loki: Propagate additional headers from Grafana to Loki
    when querying data.
    Search: Sort alphabetically in the folder view, increase
    the limit of the folder search from 50 to 1000.
    TablePanel: Fix last table column to be centered.
  * Plugin development fixes &amp; changes
    Grafana UI: Export prop types for queryfield, modal and field
    components.
    Toolkit: Fix `Cannot use import statement outside...` error in
    tests.
- Update to 9.2.0
  * Features and enhancements
    Alerting: Add Notification error feedback on contact points
    view.
    Alerting: Allow created by to be manually set when
    there's no creator for silences.
    Alerting: Expose info about notification delivery errors
    in a new /receivers endpoint.
    Alerting: Update imported prometheus alertmanager version.
    Alerting: Write and Delete multiple alert instances.
    Core: Implement aria attributes for query rows, improve a11y.
    DevEnv: Adds docker block for clickhouse.
    Docker: removes unneccesary use of edge repo.
    Explore: Revert split pane resize feature.
    Frontend: Make local storage items propagate to different tabs
    immediately.
    PublicDashboards: Allow disabling an existent public dashboard
    if it.
    QueryEditorRow: Only pass error to query editor if panel
    is not in a loading state.
    XYChart: Beta release.
    Alerting: Start ticker only when scheduler starts.
  * Bug fixes
    Alerting: Fix pq: missing FROM-clause for table "a".
    AzureMonitor: Correctly update subscriptions value in ARG
    editor.
    Chore: Regenerate swagger specification and fix validation
    failures.
    Correlations: Only return correlation for which both
    source and target datasources exist.
    Explore: Prevent panes from disappearing when resizing
    window in split view.
    Links: Fix opening links from different orgs on the same tab.
    LogContext: Fix scroll position in upper context group.
    Logs: Show copy button independently from context.
    Loki/Prometheus: Fix adding of ad hoc filters when
    jumping from dashboard to explore.
    Loki: Add support for range aggregations with by grouping.
    Loki: Fix label-value escaping in context query.
    Loki: Fix redundant escaping in adhoc filter with regex match.
    PanelEdit: Fixes resize pane border and spacing issues.
    RBAC: Redirect to /login when forceLogin is set.
    Security: Fix CVE-2022-27664.
    StateTimeline: Fix tooltip showing erroneously in shared
    crosshair dashboards.
    Tempo: Fix unexpected trimming of leading zeroes in traceID.
    Tracing: Fix bug where errors are not reported to OpenTelemetry.
- Update to 9.1.8
  * Features and enhancements
    Alerting: Update imported prometheus alertmanager version.
  * Bug fixes
    Alerting: Fix evaluation interval validation.
    Alerting: Fix migration to create rules with group index 1.
    Alerting: Fix migration to not add label "alertname".
    Azure Monitor: Fix empty Logs response for Alerting.
    Azure Monitor: Fix subscription selector when changing data
    sources.
    Google Cloud Monitoring: Fix bucket bound for distributions.
- Update to 9.1.7
  * Features and enhancements
    CloudWatch: Add missing AWS/Prometheus metrics.
    Explore: Add feature tracking events.
    Graphite: Add error information to graphite queries tracing.
    Prometheus: Restore FromAlert header.
    Search: Add search index configuration options.
    Thresholds: Add option for dashed line style.
  * Bug fixes
    Alerting: Fix default query's data source when no default
    datasource specified.
    Alerting: Fix mathexp.NoData cannot be reduced.
    Alerting: Skip unsupported file types on provisioning.
    AzureMonitor: Ensure resourceURI template variable is migrated.
    Dashboard: Fix plugin dashboard save as button.
    Docs: Fix decimals: auto docs for panel edit.
    Fix: RBAC handle `error no resolver` found.
    LibraryPanelSearch: Refactor and fix hyphen issue.
    Live: Fix live streaming with `live-service-web-worker` feature
    flag enabled.
    QueryField: Fix wrong cursor position on autocomplete.
- Update to 9.1.6
  * Features and enhancements
    DataSource: Adding possibility to hide queries from the
    inspector.
    Inspect: Hide Actions tab when it is empty.
    PanelMenu: Remove hide legend action as it was showing on
    all panel types.
    Provisioning Contact points: Support disableResolveMessage via
    YAML.
    PublicDashboards: Support subpaths when generating pubdash url.
  * Bug fixes
    Alerting: Fix legacy migration crash when rule name is too long.
    Alerting: Fix send resolved notifications.
    Azure Monitor: Fix migration issue with MetricDefinitionsQuery
    template variable query types.
    Browse: Hide dashboard actions if user does not have enough
    permission.
    ElasticSearch: Fix dispatching queries at a wrong time.
    Panel: Disable legends when showLegend is false prior to
    schema v37.
    Prometheus: Fix metadata requests for browser access mode.
    Search: Avoid requesting all dashboards when in Folder View.
    TablePanel/StatPanel: Fix values not being visible when
    background transparent.
- Update to 9.1.5
  * Features and enhancements
    Alerting: Sanitize invalid label/annotation names for external
    alertmanagers.
    Alerting: Telegram: Truncate long messages to avoid send error.
    DisplayProcessor: Handle reverse-ordered data when auto-showing
    millis.
    Heatmap: Add option to reverse color scheme.
    PluginLoader: Alias slate-react as @grafana/slate-react.
    Search: Add substring matcher, to bring back the old
    dashboard search behavior.
    Traces: More visible span colors.
  * Bug fixes
    Alerting: Fix incorrect propagation of org ID and other
    fields in rule provisioning endpoints.
    Alerting: Resetting the notification policy tree to the default
    policy will also restore default contact points.
    AzureMonitor: Fix custom namespaces.
    AzureMonitor: Fix issue where custom metric namespaces
    are not included in the metric namespace list.
    CloudWatch: Fix display name of metric and namespace.
    Cloudwatch: Fix annotation query serialization issue.
    Dashboard: Fix issue where unsaved changes warning would appear
    even after save, and not being able to change library
    panels.
    Dashboard: Hide overflow content for single left pane.
    Loki: Fix a bug where adding adhoc filters was not possible.
- Update to 9.1.4
  * Bug fixes
    GrafanaUI: Fixes Chrome issue for various query fields.
- Update to 9.1.3
  * Features and enhancements
    API: Do not expose user input in datasource error responses.
    Alerting: Write and Delete multiple alert instances.
    Library Panel: Allow to delete them when deprecated.
    Plugins Catalog: Allow to filter plugins using special
    characters.
  * Bug fixes
    Alerting: Fix UI bug when setting custom notification
    policy group by.
    AppRootPage: Fix issue navigating between two app plugin pages.
    Correlations: Use correct fallback handlers.
    RBAC: Fix deleting empty snapshots.
    LibraryElements: Fix inability to delete library panels
    under MySQL.
    Metrics: fix `grafana_database_conn_*` metrics, and add
    new `go_sql_stats_*` metrics as eventual replacement.
    TestData DB: Fix node graph not showing when the `Data type`
    field is set to `random`.
  * Deprecations
    The `grafana_database_conn_*` metrics are deprecated, and will
    be removed in a future version of Grafana. Use the
    `go_sql_stats_*` metrics instead.
- Update to 9.1.2
  * Features and enhancements
    AdHoc variable: Correctly preselect datasource when provisioning.
    AzureMonitor: Added ARG query function for template variables.
    Dashboards: Persist details message when navigating through
    dashboard save drawer's tabs.
    Dashboards: Correctly migrate mixed data source targets.
    Elasticsearch: Use millisecond intervals for alerting.
    Elasticsearch: Use millisecond intervals in frontend.
    Geomap: Local color range.
    Plugins Catalog: Use appSubUrl to generate plugins catalog urls.
    Rendering: Add support for renderer token.
  * Bug fixes
    Alerting: Fix saving of screenshots uploaded with a signed url.
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    Explore: Improve a11y of query row collapse button.
    Geomap: Fix tooltip display.
    QueryEditorRow: Filter data on mount.
    Search: Show all dashboards in the folder view.
    Tracing: Fix the event attributes in opentelemetry tracing.
  * Plugin development fixes &amp; changes
    GrafanaUI: Fix styles for invalid selects &amp; DataSourcePicker.
- Update to 9.1.1
  * Features and enhancements
    Cloud Monitoring: Support SLO burn rate.
    Schema: Restore "hidden" in LegendDisplayMode.
    Timeseries: Revert the timezone(s) property name change back to
    singular.
  * Bug fixes
    Alerting: Fix links in Microsoft Teams notifications.
    Alerting: Fix notifications for Microsoft Teams.
    Alerting: Fix width of Adaptive Cards in Teams notifications.
    ColorPickerInput: Fix popover in disabled state.
    Decimals: Fixes auto decimals to behave the same for
    positive and negative values.
    Loki: Fix unique log row id generation.
    Plugins: Fix file extension in development authentication guide.
    TimeSeries: Fix jumping legend issue.
    TimeSeries: Fix memory leak on viz re-init caused by
    KeyboardPlugin.
  * Plugin development fixes &amp; changes
    TimePicker: Fixes relative timerange of less than a day not
    displaying.
    GrafanaUI: Fixes ClipboardButton to always keep multi line
    content.
- Update to 9.1.0
  * Features and enhancements
    API: Allow creating teams with a user defined identifier.
    Alerting: Adds interval and For to alert rule details.
    Alerting: Extend PUT rule-group route to write the entire
    rule group rather than top-level fields only.
    Alerting: Use Adaptive Cards in Teams notifications.
    Azure Monitor: Add Network Insights Dashboard.
    Chore: Improve logging of unrecoverable errors.
    Correlations: Add UpdateCorrelation HTTP API.
    Dashboard: Reverted the changes of hiding multi-select
    and all variable in the datasource picker.
    Geomap: Add alpha day/night layer.
    Geomap: Add measuring tools.
    GrafanaUI: Add success state to ClipboardButton.
    Heatmap: Replace the heatmap panel with new implementation.
    KVStore: Allow empty value in kv_store.
    Prometheus: Promote Azure auth flag to configuration.
    Search: Display only dashboards in General folder of
    Search Folder View.
    Status history/State timeline: Support datalinks.
    Transform: Add a limit transform.
    Transformations: Add standard deviation and variance reducers.
  * Bug fixes
    API: Fix snapshot responses.
    Access Control: Fix permission error during dashboard
    creation flow.
    Access Control: Set permissions for Grafana's test data source.
    Alerting: Fix migration failure.
    BarGauge: Show empty bar when value, minValue and
    maxValue are all equal.
    Dashboard: Fix color of bold and italics text in panel
    description tooltip.
    Loki: Fix passing of query with defaults to code mode.
    Loki: Fix producing correct log volume query for query
    with comments.
    Loki: Fix showing of unusable labels field in detected fields.
    Tracing: Fix OpenTelemetry Jaeger context propagation.
    Alerting: AlertingProxy to elevate permissions for request
    forwarded to data proxy when RBAC enabled.
  * Plugin development fixes &amp; changes
    Plugins: Only pass `rootUrls` field in request when not empty.
  * Breaking changes
    Alert notifications to Microsoft Teams now use Adaptive Cards
    instead of Office 365 Connector Cards.
    Starting at 9.1.0, existing heatmap panels will start using a
    new implementation. This can be disabled by setting the
    `useLegacyHeatmapPanel` feature flag to true. It can be
    tested on a single dashbobard by adding
    `?__feature.useLegacyHeatmapPanel=true` to any dashboard URL.
    The most notable changes are:
    Significantly improved rendering performance
    When calculating heatmaps, the buckets are now placed on
    reasonable borders (1m, 5m, 30s etc)
    Round cells are no longer supported
- Update to 9.0.9
  * Bug fixes
    AngularPanels: Fixing changing angular panel options not taking
    having affect when coming back from panel edit.
    AuthNZ: Security fixes for CVE-2022-35957 and CVE-2022-36062.
- Update to 9.0.8
  * Features and enhancements
    Alerting: Hide "no rules" message when we are fetching
    from data sources.
    Rendering: Add support for renderer token.
    Alerting: AlertingProxy to elevate permissions for
    request forwarded to data proxy when RBAC enabled.
- Update to 9.0.7
  * Features and enhancements
    CloudMonitoring: Remove link setting for SLO queries.
  * Bug fixes
    GrafanaUI: Render PageToolbar's leftItems regardless of
    title's presence.
- Update to 9.0.6
  * Features and enhancements
    Access Control: Allow org admins to invite new users to
    their organization.
  * Bug fixes
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Prometheus: Fix adding of multiple values for regex operator.
    UI/Card: Fix card items always having pointer cursor.
- Update to 9.0.5
  * Features and enhancements
    Access control: Show dashboard settings to users who can
    edit dashboard.
    Alerting: Allow the webhook notifier to support a custom
    Authorization header.
    Plugins: Add signature wildcard globbing for dedicated
    private plugin type.
    Prometheus: Don't show errors from unsuccessful API
    checks like rules or exemplar checks.
  * Bug fixes
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Fix alert panel instance-based rules filtering.
    Apps: Fixes navigation between different app plugin pages.
    Cloudwatch: Upgrade grafana-aws-sdk to fix auth issue
    with secret keys.
    Grafana/toolkit: Fix incorrect image and font generation
    for plugin builds.
    Loki: Fix `show context` not working in some occasions.
    RBAC: Fix permissions on dashboards and folders created
    by anonymous users.
- Update to 9.0.4
  * Features and enhancements
    Browse/Search: Make browser back work properly when
    visiting Browse or search.
    Logs: Improve getLogRowContext API.
    Loki: Improve handling of empty responses.
    Plugins: Always validate root URL if specified in
    signature manfiest.
    Preferences: Get home dashboard from teams.
    SQLStore: Support Upserting multiple rows.
    Traces: Add more template variables in Tempo &amp; Zipkin.
    Traces: Remove serviceMap feature flag.
  * Bug fixes
    Access Control: Fix missing folder permissions.
    Access control: Fix org user removal for OSS users.
    Alerting: Fix Slack notifications.
    Alerting: Preserve new-lines from custom email templates
    in rendered email.
    Log: Fix text logging for unsupported types.
    Loki: Fix incorrect TopK value type in query builder.
- Update to 9.0.3
  * Features and enhancements
    Access Control: Allow dashboard admins to query org users.
    Access control: Allow organisation admins to add existing
    users to org.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Add method to provisioning API for obtaining a
    group and its rules.
    Alerting: Allow filtering of contact points by name.
    Alerting: Disable /api/admin/pause-all-alerts with
    Unified Alerting.
    Annotations: Use point marker for short time range annotations.
    AzureMonitor: Update UI to experimental package.
    AzureMonitor: Update resource and namespace metadata.
    CloudWatch: Remove simplejson in favor of 'encoding/json'.
    DashboardRow: Collapse shortcut prevent to move the
    collapsed rows.
    Navigation: Highlight active nav item when Grafana is
    served from subpath.
    Plugins: InfluxDB datasource - set epoch query param
    value as "ms".
    Plugins: InfluxDB update time range query.
    StateTimeline: Try to sort time field.
  * Bug fixes
    API: Do not validate/save legacy alerts when saving a
    dashboard if legacy alerting is disabled.
    Access Control: Fix missing folder permissions.
    Alerting: Add method to reset notification policy tree
    back to the default.
    Alerting: Fix Teams notifier not failing on 200 response
    with error.
    Alerting: Fix bug where state did not change between
    Alerting and Error.
    Alerting: Fix consistency errors in OpenAPI documentation.
    Alerting: Fix normalization of alert states for panel
    annotations.
    Alerting: Provisioning API respects global rule quota.
    CSRF: Fix additional headers option.
    Chore: Bump parse-url to 6.0.2 to fix security vulnerabilities.
    Chore: Fix CVE-2020-7753.
    Chore: Fix CVE-2021-3807.
    Chore: Fix CVE-2021-3918.
    Chore: Fix CVE-2021-43138.
    Chore: Fix CVE-2022-0155.
    Dashboard: Fixes tooltip issue with TimePicker and Setting buttons.
    Dashboard: Prevent unnecessary scrollbar when viewing
    single panel.
    Logs: Fixed wrapping log lines from detected fields.
    Loki: Add missing operators in label filter expression.
    Loki: Fix error when changing operations with different parameters.
    Loki: Fix suggesting of correct operations in query builder.
    Plugins: InfluxDB variable interpolation fix for
    influxdbBackendMigration feature flag.
    SQLstore: Fix fetching an inexistent playlist.
    Security: Fixes for CVE-2022-31107 and CVE-2022-31097.
    Snapshots: Fix deleting external snapshots when using RBAC.
    Table: Fix scrollbar being hidden by pagination.
    Templating: Changing between variables with the same name
    now correctly triggers a dashboard refresh.
    Time series panel: Fix an issue with stacks being not complete
    due to the incorrect data frame length.
- Update to 9.0.2
  * Features and enhancements
    Alerting: Add support for images in Pushover alerts.
    Alerting: Don't stop the migration when alert rule tags
    are invalid.
    Alerting: Skip the default data source if incompatible.
    AzureMonitor: Parse non-fatal errors for Logs.
    OAuth: Restore debug log behavior.
    Plugins: Improved handling of symlinks.
  * Bug fixes
    Alerting: Code-gen parsing of URL parameters and fix
    related bugs.
    Annotations: Fix annotation autocomplete causing panels
    to crash.
    Barchart: Fix warning not showing.
    CloudWatch: Enable custom session duration in AWS plugin auth.
    Dashboards: Fixes issue with the initial panel layout
    counting as an unsaved change.
    Plugins: Use a Grafana specific SDK logger implementation
    for core plugins.
    Search: Fix pagination in the new search page.
- Update to 9.0.1
  * Features and enhancements
    Alerting: Add support for image annotation in
    Alertmanager alerts.
    Alerting: Add support for images in SensuGo alerts.
    Alerting: Add support for images in Threema alerts.
    Alerting: Adds Mimir to Alertmanager data source implementation.
    Alerting: Invalid setting of enabled for unified alerting
    should return error.
    AzureMonitor: Clean namespace when changing the resource.
    AzureMonitor: Update supported namespaces and filter
    resources by the right type.
    CLI: Allow relative symlinks in zip archives when
    installing plugins.
    Dashboard: Don't show unsaved changes modal for automatic
    schema changes.
    Dashboard: Unsaved changes warning should not trigger
    when only pluginVersion has changed.
    Expression: Execute hidden expressions.
    Geomap: Support showing tooltip content on click (not
    just hover).
    Heatmap: Remove alpha flag from new heatmap panel.
    Instrumentation: Define handlers for requests that are
    not handled with named handlers.
    Log Panel: Improve log row hover contrast and visibility.
    Logs: Handle backend-mode errors in histogram.
    Loki: Do not show histogram for instant queries.
    Loki: Handle data source configs with path in the url.
    Loki: Handle invalid query type values.
    OAuth: Redirect to login if no oauth module is found or
    if module is not configured.
    OptionsUI: Move internal options editors out of @grafana/ui.
    Prometheus: Don't show undefined for step in collapsed
    options in query editor when value is "auto".
    Prometheus: Show query patterns in all editor modes for
    Prometheus and Loki.
    Tempo: Add link to Tempo Search with node service selected.
    Time Series Panel: Add Null Filling and "No Value" Support.
    TimeSeries: Add an option to set legend width.
    Timeseries: Improve cursor Y sync behavior.
    Traces: Do not use red in span colors as this looks like
    an error.
  * Bug fixes
    Alerting: Fix AM config overwrite when SQLite db is
    locked during sync.
    Alerting: Fix alert instances filtering for prom rules.
    Alerting: Fix alert rule page crashing when datasource
    contained URL unsafe characters.
    Alerting: Fix automatically select newly created folder option.
    Alerting: Fix removal of notification policy without
    labels matchers.
    CloudWatch: Allow hidden queries to be executed in case
    an ID is provided.
    Dashboard: Prevent non-repeating panels being dropped
    from repeated rows when collapsed/expanded.
    Dashboards: Fix folder picker not showing correct results
    when typing too fast.
    Datasource: Prevent panic when proxying for non-existing
    data source.
    Explore: Fix log context scroll to bottom.
    Explore: Revert "Remove support for compact format URLs".
    Expressions: Fixes dashboard schema migration issue that casued
    Expression datasource to be set on panel level.
    Formatting: Fixes valueFormats for a value of 0.
    GrafanaData: Fix week start for non-English browsers.
    LibraryPanel: Resizing a library panel to 6x3 no longer
    crashes the dashboard on startup.
    LogRow: Fix placement of icon.
    Loki: Fix bug in labels framing.
    Loki: Fix issues with using query patterns.
    Loki: Fix showing of duplicated label values in dropdown
    in query builder.
    MSSQL: Fix ParseFloat error.
    Panels: Fixes issue with showing 'Cannot visualize data'
    when query returned 0 rows.
    Playlists: Disable Create Playlist buttons for users with
    viewer role.
    Plugins: Fix typo in plugin data frames documentation.
    Prometheus: Fix body not being included in resource calls
    if they are POST.
    RolePicker: Fix submenu position on horizontal space overflow.
    Tracing: Fix trace links in traces panel.
  * Deprecations
    Support for compact Explore URLs is deprecated and will be
    removed in a future release. Until then, when navigating to
    Explore using the deprecated format the URLs are
    automatically converted. If you have existing links pointing
    to Explore update them using the format generated by Explore
    upon navigation. You can identify a compact URL by its
    format. Compact URLs have the left (and optionally right) url
    parameter as an array of strings, for example
    `&amp;left=["now-1h","now"...]`. The standard explore URLs follow
    a key/value pattern, for example
    `&amp;left={"datasource":"test"...}`. Please be sure to check
    your dashboards for any hardcoded links to Explore and update
    them to the standard URL pattern.
- Update to 9.0.0
  * Features and enhancements
    API: Add GET /api/annotations/:annotationId endpoint.
    API: Add endpoint for updating a data source by its UID.
    AccessControl: Add enterprise only setting for rbac
    permission cache.
    AccessControl: Document basic roles changes and provisioning V2.
    AccessControl: Enable RBAC by default.
    AddDataSourceConfig: Remove deprecated checkHealth prop.
    Alerting: Add Image URLs to Microsoft Teams notifier.
    Alerting: Add RBAC actions and role for provisioning API routes.
    Alerting: Add Screenshot URLs to Pagerduty Notifier.
    Alerting: Add a "Reason" to Alert Instances to show
    underlying cause of state.
    Alerting: Add a general screenshot service and
    alerting-specific image service.
    Alerting: Add image url or file attachment to email
    notifications.
    Alerting: Add image_urls to OpsGenie notification details.
    Alerting: Add notification policy flow chart.
    Alerting: Attach image URL to alerts in Webhook notifier format.
    Alerting: Attach image URLs or upload files to Discord
    notifications.
    Alerting: Attach image URLs to Google Chat notifications.
    Alerting: Attach screenshot data to Unified Alerting
    notifications.
    Alerting: Create folder for alerting when start from the
    scratch.
    Alerting: Modify alertmanager endpoints for proxying
    using the datasource UID.
    Alerting: Modify endpoint for testing a datasource rule
    using the UID.
    Alerting: Modify prometheus endpoints for proxying using
    the datasource UID.
    Alerting: State Manager takes screenshots.
    Alerting: Use UID scope for folders authorization.
    Alerting: modify ruler endpoints for proxying using the
    datasource UID.
    Angular: Adds back two angular directives that are still
    used by remaining angular bits and plugins.
    Azure Monitor: Add Resource Picker to Metrics Queries.
    Azure Monitor: Add search feature to resource picker.
    AzureMonitor: Add support for selecting multiple options when
    using the equals and not equals dimension filters.
    AzureMonitor: Remove deprecated code.
    Build: Change names to PascalCase to match.
    Chore: Remove deprecated DataSourceAPI methods.
    Chore: Upgrade typescript to 4.6.4.
    Cloud Monitoring: Use new annotation API.
    CloudMonitoring: Allow to set a custom value or disable
    graph_period.
    CloudWatch: Add generic filter component to variable editor.
    CloudWatch: Added missing AWS/AppRunner metrics.
    CloudWatch: Enable support for dynamic labels with
    migrated alias patterns.
    Cloudwatch: Pass label in deep link.
    Cloudwatch: Use new annotation API.
    Dashboard: Validate dashboards against schema on save.
    DashboardPickerByID: Add option to exclude dashboards.
    DashboardPickerById: Add optionLabel prop.
    Dashboards: Display values of 0 with the configured
    decimal places.
    Data: Remove deprecated types and functions from valueMappings.
    Elasticsearch: Remove browser access mode.
    Elasticsearch: Remove support for versions after their
    end of the life (&lt;7.10.0).
    Encryption: Add support for multiple data keys per day.
    Encryption: Enable envelope encryption by default.
    Explore: Remove support for legacy, compact format URLs.
    Explore: Skip Angular error handling when Angular support
    is disabled.
    Explore: simplify support for multiple query editors.
    FeatureToggles: Support changing feature toggles with URL
    parameters.
    FileUpload: Make component accessible by keyboard navigation.
    Formatting: Make SI number formats more robust.
    Graph: Deprecate Graph (old) and make it no longer a
    visualization option for new panels.
    IconButton: IconButtons are now correctly aligned in Safari.
    Logger: Enable new logging format by default.
    Loki: Add more query patterns.
    Loki: Enable new visual query builder by default.
    Loki: use the same dataframe-format for both live and
    normal queries.
    OAuth: Make allowed email domain case insensitive.
    Panels: Use the No value option when showing the no data
    message.
    Plugins: Remove plugin list panel.
    Query History: Enable new query history by default.
    QueryEditorRow: Show query errors next to query in a
    consistent way across Grafana.
    SAML: Implement Name Templates for
    assertion_attribute_name option.
    Service accounts: Do not display service accounts
    assigned to team.
    Settings: Use Grafana Azure SDK to pass Azure env vars
    for external plugins.
    Shortcuts: Add shortcut to show shortcuts to the list of
    shortcuts.
    Traces Panel: Add new Traces Panel visualization.
    Traces: Filter by service/span name and operation in
    Tempo and Jaeger.
    Transformations: Allow more complex regex expressions
    in `Rename by regex`.
    grafana/ui: Add default type="button" to &lt;Button&gt;.
  * Bug fixes
    Alerting: Fix database unavailable removes rules from scheduler.
    AzureMonitor: Fix auto-selection of time-grain for metrics.
    DataSources: Fixes issue with expressions not being queried.
    GraphNG: Fix thresholds by color not following data update.
    Jaeger: Update operations dropdown.
    Login: Fix mismatching label on auth_module in user list.
    Playlists: Save button now correctly creates a new playlist.
    RBAC: Fix migrations running in the wrong order causing
    inheritance problem in enterprise.
    ServiceAccounts: Add identifiable token prefix to service
    account tokens.
    Traces: Fix missing CopyButton on KeyValueTables and
    overlapping of panels.
  * Deprecations
    `setExploreQueryField`, `setExploreMetricsQueryField` and
    `setExploreLogsQueryField` are now deprecated and will be
    removed in a future release. If you need to set a different
    query editor for Explore, conditionally render based on
    `props.app` in your regular query editor.
  * Plugin development fixes &amp; changes
    Chore: Remove react-testing-lib from bundles.
    Select: Portal menu by default.
  * Breaking changes
    The `@grafana/ui` package helper function
    `selectOptionInTest` used in frontend tests has been removed
    as it caused testing libraries to be bundled in the
    production code of Grafana. If you were using this helper
    function in your tests please update your code accordingly:
    ```js
    // before
    import { selectOptionInTest } from '@grafana/ui';
    // ...test usage
    await selectOptionInTest(selectEl, 'Option 2');
    // after
    import { select } from 'react-select-event';
    // ...test usage
    await select(selectEl, 'Option 2',
    { container: document.body });
    ```
    Removed deprecated `checkHealth` prop from the `@grafana/e2e`
    `addDataSource` config. Previously this value defaulted to
    `false`, and has not been used in end-to-end tests since
    Grafana 8.0.3.
    Removes the deprecated `LegacyBaseMap`, `LegacyValueMapping`,
    `LegacyValueMap`, and `LegacyRangeMap` types, and
    `getMappedValue` function from grafana-data. Migration is as
    follows:
    | Old                  | New                     |
    | -------------------- | ----------------------- |
    | `LegacyBaseMap`      | `MappingType`           |
    | `LegacyValueMapping` | `ValueMapping`          |
    | `LegacyValueMap`     | `ValueMap`              |
    | `LegacyRangeMap`     | `RangeMap`              |
    | `getMappedValue`     | `getValueMappingResult` |
    This change fixes a bug in Grafana where intermittent failure
    of database, network between Grafana and the database, or
    error in querying the database would cause all alert rules to
    be unscheduled in Grafana. Following this change scheduled
    alert rules are not updated unless the query is successful.
    The `get_alert_rules_duration_seconds` metric has been
    renamed to `schedule_query_alert_rules_duration_seconds`.
    Any secret (data sources credential, alert manager
    credential, etc, etc) created or modified with Grafana v9.0
    won't be decryptable from any previous version (by default)
    because the way encrypted secrets are stored into the
    database has changed. Although secrets created or modified
    with previous versions will still be decryptable by Grafana
    v9.0.
    If required, although generally discouraged, the
    `disableEnvelopeEncryption` feature toggle can be enabled to
    keep envelope encryption disabled once updating to Grafana
    v9.0.
    In case of need to rollback to an earlier version of Grafana
    (i.e. Grafana v8.x) for any reason, after being created or
    modified any secret with Grafana v9.0, the
    `envelopeEncryption` feature toggle will need to be enabled
    to keep backwards compatibility (only from `v8.3.x` a bit
    unstable, from `8.5.x` stable).
    As a final attempt to deal with issues related with the
    aforementioned situations, the `grafana-cli admin
    secrets-migration rollback` command has been designed to
    move back all the Grafana secrets encrypted with envelope
    encryption to legacy encryption. So, after running that
    command it should be safe to disable envelope encryption
    and/or roll back to a previous version of Grafana.
    Alternatively or complementarily to all the points above,
    backing up the Grafana database before updating could be a
    good idea to prevent disasters (although the risk of getting
    some secrets corrupted only applies to those updates/created
    with after updating to Grafana v9.0).
    According to the dynamic labels documentation, you can use up
    to five dynamic values per label. There’s currently no such
    restriction in the alias pattern system, so if more than 5
    patterns are being used the GetMetricData API will return an
    error.
    Dynamic labels only allow \${LABEL} to be used once per
    query. There’s no such restriction in the alias pattern
    system, so in case more than 1 is being used the
    GetMetricData API will return an error.
    When no alias is provided by the user, Grafana will no longer
    fallback with custom rules for naming the legend.
    In case a search expression is being used and no data is
    returned, Grafana will no longer expand dimension values, for
    instance when using a multi-valued template variable or star
    wildcard `*` in the dimension value field.
    Time series might be displayed in a different order. Using
    for example the dynamic label `${PROP('MetricName')}`, might
    have the consequence that the time series are returned in a
    different order compared to when the alias pattern
    `{{metric}}` is used
    In Elasticsearch, browser access mode was deprecated in
    grafana 7.4.0 and removed in 9.0.0. If you used this mode,
    please switch to server access mode on the datasource
    configuration page.
    Environment variables passed from Grafana to external Azure
    plugins have been renamed:
    `AZURE_CLOUD` renamed to `GFAZPL_AZURE_CLOUD`
    `AZURE_MANAGED_IDENTITY_ENABLED` renamed to
    `GFAZPL_MANAGED_IDENTITY_ENABLED`
    `AZURE_MANAGED_IDENTITY_CLIENT_ID` renamed to
    `GFAZPL_MANAGED_IDENTITY_CLIENT_ID`
    There are no known plugins which were relying on these
    variables. Moving forward plugins should read Azure settings
    only via Grafana Azure SDK which properly handles old and new
    environment variables.
    Removes support for for ElasticSearch versions after their
    end-of-life, currently versions &lt; 7.10.0. To continue to use
    ElasticSearch data source, upgrade ElasticSearch to version
    7.10.0+.
    Application Insights and Insight Analytics queries in Azure
    Monitor were deprecated in Grafana 8.0 and finally removed in
    9.0. Deprecated queries will no longer be executed.
    grafana/ui: Button now specifies a default type="button"
    The `Button` component provided by @grafana/ui now specifies
    a default `type="button"` when no type is provided.
    In previous versions, if the attribute was not specified for
    buttons associated with a `&lt;form&gt;` the default value was
    `submit` per the specification. You can preserve the old
    behavior by explicitly setting the type attribute:
    `&lt;Button type="submit" /&gt;`
    The `Rename by regex` transformation has been improved to
    allow global patterns of the form `/&lt;stringToReplace&gt;/g`.
    Depending on the regex match used, this may cause some
    transformations to behave slightly differently. You can
    guarantee the same behaviour as before by wrapping the
    `match` string in forward slashes (`/`), e.g. `(.*)` would
    become `/(.*)/`
    `&lt;Select /&gt;` menus will now portal to the document body by
    default. This is to give more consistent behaviour when
    positioning and overlaying. If you were setting
    `menuShouldPortal={true}` before you can safely remove that
    prop and behaviour will be the same. If you weren't
    explicitly setting that prop, there should be no visible
    changes in behaviour but your tests may need updating. If you
    were setting `menuShouldPortal={false}` this will continue to
    prevent the menu from portalling.
    Grafana alerting endpoint prefixed with `api/v1/rule/test`
    that tests a rule against a Corte/Loki data source now
    expects the data source UID as a path parameter instead of
    the data source numeric identifier.
    Grafana alerting endpoints prefixed with `api/prometheus/`
    that proxy requests to a Cortex/Loki data source now expect
    the data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/ruler/` that
    proxy requests to a Cortex/Loki data source now expect the
    data source UID as a path parameter instead of the data
    source numeric identifier.
    Grafana alerting endpoints prefixed with `api/alertmanager/`
    that proxy requests to an Alertmanager now expect the data
    source UID as a path parameter instead of the data source
    numeric identifier.
    The format of log messages have been updated, `lvl` is now
    `level` and `eror`and `dbug` has been replaced with `error`
    and `debug`. The precision of timestamps has been increased.
    To smooth the transition, it is possible to opt-out of the
    new log format by enabling the feature toggle `oldlog`.
    This option will be removed in a future minor release.
    In the Loki data source, the dataframe format used to
    represent Loki logs-data has been changed to a more efficient
    format. The query-result is represented by a single dataframe
    with a "labels" column, instead of the separate dataframes
    for every labels-value. When displaying such data in explore,
    or in a logs-panel in the dashboard will continue to work
    without changes, but if the data was loaded into a different
    dashboard-panel, or Transforms were used, adjustments may be
    necessary. For example, if you used the "labels to fields"
    transformation with the logs data, please switch to the
    "extract fields" transformation.</changelog>
  <changelog author="marius.kittler@suse.com" date="1680782400">- Update to 9.4.7 (2023-03-16)
  * Bug fixes
    Alerting: Update scheduler to receive rule updates only from
    database.
    Influxdb: Re-introduce backend migration feature toggle.
    Security: Fixes for CVE-2023-1410.
  * Breaking changes
    The InfluxDB backend migration feature toggle
    (influxdbBackendMigration) has been reintroduced in this
    version as issues were discovered with backend processing of
    InfluxDB data. Unless this feature toggle is enabled, all
    InfluxDB data will be parsed in the frontend. This frontend
    processing is the default behavior.
    In Grafana 9.4.4, InfluxDB data parsing started to be handled
    in the backend. If you have upgraded to 9.4.4 and then added
    new transformations on InfluxDB data, those panels will fail to
    render. To resolve this either:
    Remove the affected panel and re-create it or
    edit the `time` field as `Time` in `panel.json` or
    `dashboard.json`</changelog>
  <changelog author="witold.bedyk@suse.com" date="1682683200">- Remove 0002-Update-exporter-toolkit-to-version-0.7.3.patch
- Modified 0001-Add-source-code-reference.patch
- Update to 9.5.0 (CVE-2023-1387, bsc#1210907, jsc#PED-3694)
  * Breaking changes
  - default named retention policies won't be used to query.
    Users who have a default named retention policy in their
    influxdb database, have to rename it to something else.
    Having default named retention policy is not breaking
    anything. We will make sure to use the actual default
    retention policy under the hood. To change the hardcoded
    retention policy in the dashboard.json, users must they
    select the right retention policy from dropdown and save the
    panel/dashboard.
  - Grafana Alerting rules with NoDataState configuration set to
    Alerting will now respect "For" duration.
  - Users who use LDAP role sync to only sync Viewer, Editor and
    Admin roles, but grant Grafana Server Admin role manually
    will not be able to do that anymore. After this change, LDAP
    role sync will override any manual changes to Grafana Server
    Admin role assignments. If grafana_admin is left unset in
    LDAP role mapping configuration, it will default to false.
  * Features and enhancements
    API keys: Add deprecation to api keys.
    API: Enable serving Swagger UI by default and add docs and
    guidelines.
    API: Permit Cache-Control (browser caching) for datasource
    resources.
    Accessibility: Make row actions keyboard accessible.
    Admin/Plugins: Set category filter in connections link.
    Alerting: Add CustomDetails field in PagerDuty contact point.
    Alerting: Add dashboard and panel links to rule and instance
    annotations.
    Alerting: Add filter and remove funcs for custom labels and
    annotations.
    Alerting: Add fuzzy search to alert list view.
    Alerting: Add metrics for active receiver and integrations.
    Alerting: Better printing of labels.
    Alerting: Create new state history "fanout" backend that
    dispatches to multiple other backends at once.
    Alerting: Enable preview for recording rules.
    Alerting: Fetch all applied alerting configurations.
    Alerting: Introduce proper feature toggles for common state
    history backend combinations.
    Alerting: Make time range query parameters not required when
    querying Loki.
    Alerting: New notification policies view.
    Alerting: No longer index state history log streams by
    instance labels.
    Alerting: Respect "For" Duration for NoData alerts.
    Alerting: Support filtering rules by multiple datasources.
    Alerting: Switch to snappy-compressed-protobuf for outgoing
    push requests to Loki.
    Angular: Prevent angular from loading when disabled.
    Auth: Add Generic oauth skip org role sync setting.
    Auth: Add feature flag to move token rotation to client.
    Auth: Show user sync external Authentication status.
    Backend: Use sdk version 0.148.0.
    Chore: Add stat for remote cache config.
    Chore: Replace short UID generation with more standard UUIDs.
    Chore: Use DOMPurify to sanitize strings rather than js-xss.
    CloudMonitoring: Add possibility to use path for private key.
    CloudWatch Logs: Update default timeout to 30m.
    CloudWatch: Add AWS/IotSiteWise namespace and metrics.
    CloudWatch: Add account support to variable queries.
    CloudWatch: Make deeplinks work for us-gov and china regions.
    Cloudwatch: Add MeteredIOBytes metric for EFS.
    Command Palette: Display dashboard location.
    Command palette: Enable folder searching.
    Connections: Turn on feature toggle by default.
    Cookies: Provide a mechanism for per user control over cookies.
    Dashboard Datasource: Update Query List &amp; Improve UX.
    Dashboard: Add a feature that creates a table panel when a
    spreadsheet file is dropped on the dashboard.
    Dashboard: Add new visualization/row/library panel/pasted
    panel is now a dropdown menu.
    Dashboard: Add value format for requests per minute.
    Dashboard: Empty/No Panels dashboard with a new design.
    Dashboard: When dashboard is not found show message instead
    of empty page.
    Dashboards: Enable feature flag newPanelChromeUI by default.
    Dataplane: Support timeSeriesLong without transform.
    Datasources: Add user_agent header customization for outgoing
    HTTP requests.
    Datasources: Use getDefaultQuery in annotations editors.
    Docs: Add documentation on how to debug backend plugins.
    Docs: Deprecate dashboard previews.
    Elasticsearch: Detect Elasticsearch version.
    Elasticsearch: Run Explore queries trough data source backend.
    Explore: Add range option to internal data links.
    Explore: Add transformations to correlation data links.
    Explore: Support mixed data sources for supplementary query.
    Extensions: Expose an enum for available placements.
    Feat: Changing link destination for get more plugins.
    Feat: Linking to plugin details page rather than externally
    for new datasources.
    FieldMatchers: Add match by value (reducer).
    Flame graph: Add context menu.
    Flame graph: Add metadata above flame graph.
    Geomap: Improve tooltip url for photos layer.
    Geomap: Release night / day layer.
    InfluxDB: Move database information into jsondata.
    Jaeger and Zipkin: Config &amp; docs upgrade.
    LDAP: Allow setting minimum TLS version and accepted ciphers.
    Live: Remove (alpha) ability to configure live pipelines.
    Logger: Add feature toggle for errors in HTTP request logs.
    Login: Allow custom name and icon for social providers.
    Logs Panel: Refactor style generation to improve rendering
    performance.
    Logs: Add millisecond to timestamp in log line.
    Logs: Rename dedup to deduplicate.
    Loki Query Editor: Make Monaco the default editor.
    Loki: Add unpack query builder hint.
    Loki: Add descriptions to query builder operations.
    Loki: Add placeholder to the loki query editor.
    Loki: Always fetch for new label keys in the QueryBuilder.
    Loki: Display error with label filter conflicts.
    Loki: Improve the display of loki query stats.
    MSSQL/Postgres: List views in table dropdown as well.
    MSSQL: Update forked go-mssqldb dependency.
    Metrics: Update comment to mention folders instead of
    dashboards.
    Navigation: Enable new navigation by default.
    NodeGraph: Support icons for nodes.
    Notifications: Enable display of trace ID by default.
    Packaging: Start Grafana service after InfluxDB.
    Panel Header: Add CancelQuery option to panel header.
    Panel: Show multiple errors info in the inspector.
    PanelChrome: Add option to show actions on the right side
    (actions = leftItems).
    Phlare: Allow variables in labelSelector (in query).
    Plugin: Skip preloading disabled app plugins.
    Plugins: Add optional logger for plugin requests sent to backend
    plugins.
    Plugins: Extend panel menu with commands from plugins.
    Plugins: Extend panel menu with links from plugins.
    Plugins: Improve instrumentation by adding metrics and tracing.
    Plugins: Support for distributed tracing in backend plugins SDK.
    Plugins: Support for link extensions.
    Profiling: Enable flame graph &amp; Phlare/Parca data sources for
    all users.
    Prometheus Datasource: Improve Prom query variable editor.
    Prometheus Metrics: Add missing stat_total_teams metric.
    Prometheus/Loki: Run query explicitly instead of onblur in panel
    edit.
    Prometheus: Browser resource caching.
    Prometheus: Improve prometheus query variable editor.
    Prometheus: Use $__rate_interval for rate queries generated by
    metric browser.
    Pubdash: Email sharing handle dashboard deleted.
    PublicDashboards: Backfills share column with default value.
    PublicDashboards: Configuration modal redesign.
    PublicDashboards: Email sharing.
    PublicDashboards: Enable creation when dashboard has template
    variables.
    PublicDashboards: Paused or deleted public dashboard screen.
    QueryHistory: Improve handling of mixed datasource entries.
    Rendering: Experimental support to use JWTs as auth method.
    SQL Datasources: Add back help content.
    Schema: Remove exclusion for timeseries and update imports.
    Search: Improvements for starred dashboard search.
    Select: Show icon in the grafana/ui Select component.
    Service accounts: Creation logic simplification.
    Service accounts: Remove Add API keys buttons and remove one
    state of migrating for API keys tab.
    SplitOpen: Update API to accept multiple queries.
    Stat Panel: Add an option for a non-gradient/solid background.
    Stat: Add ability to remove default single-color background
    gradient.
    SupportBundles: Add OAuth bundle collectors.
    Table Panel: Add ability to use text color for value or hide
    value in gauge cell.
    Table: Introduce sparkline cell type.
    Tempo: Config and doc updates.
    Tempo: Update service graph view and docs.
    TraceView: Add key and url escaping of json tag values.
    TraceView: Reworked header.
    Tracing: Add more detail to HTTP Outgoing Request.
    Tracing: Docs and config improvements for Tempo/Jaeger/Zipkin.
    Tracing: Support multiple OTel propagators.
    Transformations: Support time format when converting time to
    strings.
    Transformers: Support adding the row index using calculate
    field transformer.
    Units: Format currency with negative before the symbol.
  * Bug fixes
    API: Fix "Updated by" Column in dashboard versions table.
    AccessControl: Allow editors to access GET /api/datasources.
    Alerting: Add "backend" label to state history writes metrics.
    Alerting: Add alert instance labels to Loki log lines in
    addition to stream labels.
    Alerting: Elide requests to Loki if nothing should be recorded.
    Alerting: Fix DatasourceUID and RefID missing for
    DatasourceNoData alerts.
    Alerting: Fix ambiguous handling of equals in labels when
    bucketing Loki state history streams.
    Alerting: Fix attachment of external labels to Loki state
    history log streams.
    Alerting: Fix creating a recording rule when having multiple
    datasources.
    Alerting: Fix explore link in alert detail view.
    Alerting: Fix share URL for Prometheus rules on subpath.
    Alerting: Fix stats that display alert count when using unified
    alerting.
    Alerting: Hide mute timing actions when dealing with vanilla
    prometheus.
    Alerting: Paginate result previews.
    Alerting: Prometheus-compatible Alertmanager timings editor.
    Alerting: Update scheduler to get updates only from database.
    Alerting: Use a completely isolated context for state history
    writes.
    Alerting: Use displayNameFromDS if available in preview.
    Annotation List: Fix panel not updating when variable is
    changed.
    Annotations: Ignore unique constraint violations for tags.
    Auth: Fix orgrole picker disabled if isSynced user.
    AzureMonitor: Fix Log Analytics portal links.
    BrowseDashboards: Fix move to General folder not working.
    Catalog: Show install error with incompatible version.
    Chore: Update Grafana to use Alertmanager
    v0.25.1-0.20230308154952-78fedf89728b.
    CloudMonitoring: Add project selector for MQL editor[fix].
    CloudWatch Logs: Fix running logs queries with expressions.
    CloudWatch Logs: Fix to make log queries use a relative time if
    available.
    CloudWatch Logs: Revert "Queries in an expression should run
    synchronously".
    CloudWatch: Fix cachedQueries insights not being updated for
    metric queries.
    Cloudwatch: Pass refId from query for expression queries.
    Dashboards: Evaluate provisioned dashboard titles in a
    backwards compatible way.
    Dashboards: Fix broken internal data links.
    Database: Don't sleep 10ms before every request.
    Elasticsearch: Fix processing of response with multiple group
    by for alerting.
    Elasticsearch: Handle multiple annotation structures.
    Email: Mark HTML comments as "safe" in email templates.
    ErrorHandling: Fixes issues with bad error messages.
    ErrorView: Better detection of no-data responses.
    Explore: Make DataSourcePicker visible on small screens.
    Fix: DataLinks from data sources override user defined data
    link.
    Fix: Top table rendering and update docs.
    Frontend: Fix broken links in /plugins when pathname has a
    trailing slash.
    Geomap: Fix route layer zoom behavior.
    Google Cloud Monitoring: Fix project variable.
    HeatMap: Sort y buckets when all bucket names are numeric.
    InfluxDB: Fix querying with hardcoded retention policy.
    InfluxDB: Fix sending retention policy with InfluxQL queries.
    KVStore: Include database field in migration.
    LDAP: Always synchronize Server Admin role through role sync if
    role sync is enabled.
    Library panels: Ensure pagination controls are always correctly
    displayed.
    Loki: Fix autocomplete situations with multiple escaped quotes.
    MegaMenu: Fixes mega menu showing scroll indicator when it
    shouldn't.
    Navigation: Redirect to root page when switching organization.
    Navigation: Scrolled hamburger menu links now navigate correctly
    in Safari.
    NestedFolders: Fix nested folder deletion.
    New Panel Header: Fix when clicking submenu item the parent
    menu item onClick get's triggered.
    Phlare: Fix error when there are no profileTypes to send from
    backend.
    PieChart: Show long labels properly.
    PluginExtensions: Fixed issue with incorrect type being
    exposed when configuring an extension.
    Plugins: Ensure proxy route bodies are valid JSON.
    Plugins: Fix width for README pages with tables.
    Plugins: Markdown fetch retry with lowercase.
    Plugins: Skip instrumenting plugin build info for core and
    bundled plugins.
    PublicDashboards: Query collapsed panels inside rows.
    Query Splitting: Fix for handling queries with no requestId.
    SQL Datasources: Fix variable throwing error if query returns no
    data.
    SQL Datasources: Prevent Call Stack Overflows with Large
    Numbers of Values for Variable.
    SQLStore: Fix SQLite error propagation if query retries are
    disabled.
    Stat Panel: Fix issue with clipping text values.
    Table Panel: Fix panel migration for options cell type.
    Table: Fix migrations from old angular table for cell color
    modes.
    Table: Fixes issue with pagination summary causing scrollbar.
    Table: Fixes table panel gauge alignment.
    TablePanel: Fix table cells overflowing when there are
    multiple data links.
    TablePanel: fix footer bug; no footer calculated values after
    "hidden" column override.
    Templating: Allow percent encoding of variable with custom all.
    Tempo: Set default limit if none is provided for traceql
    queries.
    TimeSeries: Don't extend stepped interpolation to graph edges.
    TimeSeries: Improve stacking direction heuristic.
    Trace View: Update the queryType to traceql for checking if
    same trace when clicking span link.
    TraceView: Don't require preferredVisualisationType to render.
    Utils: Reimplement util.GetRandomString to avoid modulo bias.
    XYChart: Add all dataset columns in tooltip.
  * Plugin development fixes &amp; changes
    DateTimePicker: Can now select time correctly.
    Grafana UI: Fix tooltip prop of button component.
    DateTimePicker: Add min date support to calendar.
    GrafanaUI: Implement new component Toggletip.
    ContextMenu: Fix padding and show border based on items.</changelog>
</package>
<package pkgid="87d5a7c28ee4310e0321642249f32a16e6d446365e725523a38aa7ce59746af5" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="45880e0ea71c5082405acc666cee66f095f49538621c9b96f2158aef04205ef1" name="hwdata" arch="src">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="e423b0724cc7a0610998eef8c0a185ce0611563775c757d06d3da3fbed519985" name="iniparser" arch="src">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.de" date="1180267200">- Update to version 2.17.
  + Apply some const and fix c++ warnings.
  + Merge revision 19928 from samba.org subversion.
  + Applied patches to the Makefile to build a shared library.</changelog>
  <changelog author="crrodriguez@suse.de" date="1198756800">- fix library-without-ldconfig* errors</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="anschneider@suse.de" date="1209988800">- build without rpath</changelog>
  <changelog author="meissner@suse.de" date="1219233600">- use RPM_OPT_FLAGS, libiniparser.a can be 644</changelog>
  <changelog author="anschneider@suse.de" date="1219924800">- create packages following the shlib policy
- build only the shared library</changelog>
  <changelog author="ro@suse.de" date="1227787200">- update baselibs.conf</changelog>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="jengelh@medozas.de" date="1261051200">- add baselibs.conf as a source
- enable parallel building</changelog>
  <changelog author="lars@samba.org" date="1335009600">- Update to version 3.1.
  + Const'ified input string arguments
- Update to version 3.0.
  + Single function to set values in a dict: iniparser_set()
  + Bug corrected for lines containing only \n
  + Enhanced documentation
  + C++ nonsense removed</changelog>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="4da213cf2a2507d156eca991a683e90d97affa1edae307f6f50e01a0c84394af" name="jansi" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="3dc93ce514dc8399313f673204d18bd225ee5ab6ce2633b7703c01e24506ad2c" name="jansi" arch="ppc64le">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="d429758b32733e1bed311a54b2264e7ea536b36cbe69818f6f13a2a3a7929dd3" name="jansi" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="72a6486d0b1aff725ccf8d196ade692bdb3760c6384479bec582540b8ecf9ecf" name="jansi" arch="src">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="fbf3f6a064fbd9f95458af1b6bdf247da1535afa72c3276656015c80090f42de" name="jansi" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="be08e564116ca684a22c0d70bf05d8ae35fd6e8dcc2f44aa86024bd570c15934" name="jansi-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1549281600">- Initial package of jansi 1.17.1
- Add build.xml file for building with ant</changelog>
  <changelog author="jengelh@inai.de" date="1549540800">- Fix double-shipping of documentation
- Avoid name repetition in summary (potential rpmlint warning</changelog>
  <changelog author="fstrba@suse.com" date="1554811200">- Remove reference to the parent pom since we are not building
  using Maven.
- Make tests conditional and switched off by default</changelog>
  <changelog author="fstrba@suse.com" date="1561636800">- Remove the reference to jansi-project parent from jansi pom
- Resolve manually jansi-native-version variable so that ivy
  understands it</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1652702400">- Upgrade the latest upstream release 2.4.0
  * Integrates jansi-native libraries
  * Does not depend on jansi-native and hawtjni-runtime
- Make the jansi package archful since it installs a native
  library and jni jar
- Added patch:
  * jansi-jni.patch
    + Give a possibility to load the native libjansi.so from
    system</changelog>
  <changelog author="fstrba@suse.com" date="1682510400">- Fetch sources using source_service and don't distribute legally
  spurious files (bsc#1210877)</changelog>
</package>
<package pkgid="995f66ffdb0356022bdfda3c028133308441c4227e92bc473a5a2efa9cd13f54" name="java-1_8_0-ibm" arch="src">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="ed2c1add3189eb9f7f18b81ce27f7394320c543a2453e72772b5ca335188b79a" name="java-1_8_0-ibm" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="4bf4e1acdb63512e281942e025fbe748e3326bc6f529bb4d599a97b3b3a6b04b" name="java-1_8_0-ibm" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="9a5696eb9673e6dabdfc02a6f8e71e1530b3f34dbed672176053c5b796c6a8f3" name="java-1_8_0-ibm" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="46865e76c21ad070b9de2ea3084d30ca8146858f506b911db65d2ab001bd086f" name="java-1_8_0-ibm-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="57b80b7c65f32c20f941c8ca21bcd8c58c51bcf095edba693884f15bfb7d262d" name="java-1_8_0-ibm-alsa" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="e6767dadbe68ad631724f62194b587d465cdfcf0905f629b18274cdf777e6575" name="java-1_8_0-ibm-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="130b9462cd79c8027a30a94425d73e4ae771da86c2ad9f653b54d206f742fe7e" name="java-1_8_0-ibm-demo" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="11cce560443a226a45aafa970602b00e3acd19baea226e157dcaf41adf06d2a0" name="java-1_8_0-ibm-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="abfb51e2bd89c7b6dbb8e47a1a15d7b1b10cddff0cf0b2df3a3b2d011754f7c3" name="java-1_8_0-ibm-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="5073767876d0303728debdba7e6ea61c8581bb28ab0869f48e506f806b4df208" name="java-1_8_0-ibm-devel" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="1f0c569eb160e03ae311d46c3fa8b41235b7de4943f9b25c99ba30cbddb052c3" name="java-1_8_0-ibm-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="b761d22d4d9766b324d791132f00b62ce1f605c6eccf023e9cc95b92b98391c4" name="java-1_8_0-ibm-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="38f3131e822807929ab9b3581cccfe21c1fad851863546da237b8c7e7cfbf340" name="java-1_8_0-ibm-plugin" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="f6824c604937b8c6495823162b8916e99318f1a4c35846c7b974230482aaac4c" name="java-1_8_0-ibm-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="22aee178b7e429c4485a7b8e1a389157398825333916f366aea2456344610da7" name="java-1_8_0-ibm-src" arch="s390x">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="cc58d5f3b8b880a344c0f94d32043e21290ebc9850bb186bab39fe2e1c6a1c69" name="java-1_8_0-ibm-src" arch="x86_64">
  <version epoch="0" ver="1.8.0_sr8.5" rel="150000.3.74.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1591704000">- Fix update-alternatives for the 32bit packages in baselibs.conf [bsc#1171352]</changelog>
  <changelog author="pmonreal@suse.com" date="1597406400">- Update to Java 8.0 Service Refresh 6 Fix Pack 15 [bsc#1175259, bsc#1174157]
  CVE-2020-14577 CVE-2020-14578 CVE-2020-14579 CVE-2020-14581
  CVE-2020-14556 CVE-2020-14621 CVE-2020-14593 CVE-2020-14583
  CVE-2019-17639
  * Class Libraries:
  - JAVA.UTIL.ZIP.DEFLATER OPERATIONS THROW JAVA.LANG.INTERNALERROR
  - JAVA 8 DECODER OBJECTS CONSUME A LARGE AMOUNT OF JAVA HEAP
  - TRANSLATION MESSAGES UPDATE FOR JCL
  - UPDATE TIMEZONE INFORMATION TO TZDATA2020A
  * Java Virtual Machine:
  - IBM JAVA REGISTERS A HANDLER BY DEFAULT FOR SIGABRT
  - LARGE MEMORY FOOTPRINT HELD BY TRACECONTEXT OBJECT
  * JIT Compiler:
  - CRASH IN THE INTERPRETER AFTER OSR FROM INLINED SYNCHRONIZED METHOD
    IN DEBUGGING MODE
  - INTERMITTENT ASSERTION FAILURE REPORTED
  - CRASH IN RESOLVECLASSREF() DURING AOT LOAD
  - JIT CRASH DURING CLASS UNLOADING IN J9METHOD_HT::ONCLASSUNLOADING()
  - SEGMENTATION FAULT WHILE COMPILING A METHOD
  - UNEXPECTED CLASSCASTEXCEPTION THROWN IN HIGH LEVEL PARALLEL
    APPLICATION ON IBM Z PLATFORM
  * Security:
  - CERTIFICATEEXCEPTION OCCURS WHEN FILE.ENCODING PROPERTY SET TO
    NON DEFAULT VALUE
  - CHANGES TO IBMJCE AND IBMJCEPLUS PROVIDERS
  - IBMJCEPLUS FAILS, WHEN THE SECURITY MANAGER IS ENABLED, WITH
    DEFAULT PERMISSIONS, SPECIFIED IN JAVA.POLICY FILE
  - IN CERTAIN INSTANCES, IBMJCEPLUS PROVIDER THROWS EXCEPTION FROM
    KEYFACTORY CLASS</changelog>
  <changelog author="pmonreal@suse.com" date="1601294400">- Update to Java 8.0 Service Refresh 6 Fix Pack 16
  * Java ifix for z15 compression problem [bsc#1175295]
  * Class Libraries:
  - z15 high utilization following Z/VM and Linux migration from
    z14 To z15
  * Java Virtual Machine:
  - Assertion failed when trying to write a class file
  - Assertion failure at modronapi.cpp
  - Improve the performance of defining and finding classes
  * JIT Compiler:
  - An assert in ppcbinaryencoding.cpp may trigger when running
    with traps disabled on power
  - AOT field offset off by n bytes
  - Segmentation fault in jit module on ibm z platform</changelog>
  <changelog author="pmonreal@suse.com" date="1608033600">- Update to Java 8.0 Service Refresh 6 Fix Pack 20 [bsc#1180063,bsc#1177943]
  CVE-2020-14792 CVE-2020-14797 CVE-2020-14781 CVE-2020-14779
  CVE-2020-14798 CVE-2020-14796 CVE-2020-14803
  * Class libraries:
  - SOCKETADAPTOR$SOCKETINPUTSTREAM.READ is blocking for more time
    that the set timeout
  - Z/OS specific C function send_file is changing the file pointer
    position
  * Java Virtual Machine:
  - Crash on iterate java stack
  - Java process hang on SIGTERM
  * JIT Compiler:
  - JMS performance regression from JDK8 SR5 FP40 TO FP41</changelog>
  <changelog author="pmonreal@suse.com" date="1613131200">- Update to Java 8.0 Service Refresh 6 Fix Pack 25
  [bsc#1182186, bsc#1181239, CVE-2020-27221, CVE-2020-14803]
  * CVE-2020-27221: Potential for a stack-based buffer overflow
    when the virtual machine or JNI natives are converting from
    UTF-8 characters to platform encoding.
  * CVE-2020-14803: Unauthenticated attacker with network access
    via multiple protocols allows to compromise Java SE.</changelog>
  <changelog author="pmonreal@suse.com" date="1622548800">- Update to Java 8.0 Service Refresh 6 Fix Pack 26
  * Java Virtual Machine:
  - Behaviour change in getmethod for java8_sr6_fp20
  - Crash when outputting to verbose GC log using the specifier
    characters
  - Outofmemoryerror happens due to nursery heap space shortage
  * JIT Compiler:
  - Occasional assertion being triggered in code generation
  - SEGV when using hashmap$hashiterator.nextnode() in
    multiple threads concurrently</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Update to Java 8.0 Service Refresh 6 Fix Pack 30
  [bsc#1185056, CVE-2021-2161][bsc#1185055, CVE-2021-2163]
  * Service, Build, Packaging and Deliver:
  - Symlink issue reported for javaws in jre packages
  - ibmjceplus security provider depends on msvcr120.dll on windows
  * Class Libraries:
  - Exception in pure ipv6 environment in IBM sdk
  - Fix security vulnerability CVE-2021-2161
  - Update cacerts to include certificates from entrust and globalsign
  - Update timezone information to the latest tzdata2021a
  * Java Virtual Machine:
  - Sssertion failed at copyforwardscheme.cpp because a tag slot
    (0x3) was treated as an object
  - GPF event from method unlinkclassloadingconstraints
  - JVM takes more time to start up
  - xgc:classunloadingkickoffthreshold not working as expected
  * JIT Compiler:
  - The JIT incorrectly compiles a method consisting of non-javac
    generated bytecodes from java 8.0.6.20 and up to 8.0.6.30
  * Security:
  - httpsurlconnection drops the timeout and hangs forever in read
  - sslsocket that is never bound or connected leaks socket resources
  - TLS connection always receives close_notify exception
  - JSSE fails to open racf keystores
  - Kerberos ticket renewal fails with debug enabled following
    java.lang.illegalstateexception
  - Update JSSE to oracle jdk8u281 fix level</changelog>
  <changelog author="pmonreal@suse.com" date="1641211200">- Update to Java 8.0 Service Refresh 7 Fix Pack 0 [bsc#1194232]
  [bsc#1194198, bsc#1192052, CVE-2021-41035]
  [bsc#1191902, CVE-2021-35560] [bsc#1191904, CVE-2021-35578]
  [bsc#1191914, CVE-2021-35586] [bsc#1191913, CVE-2021-35564]
  [bsc#1191911, CVE-2021-35559] [bsc#1191910, CVE-2021-35556]
  [bsc#1191909, CVE-2021-35565] [bsc#1191905, CVE-2021-35588]
- Update to Java 8.0 Service Refresh 6 Fix Pack 35
  [bsc#1188565, CVE-2021-2369] [bsc#1188564, CVE-2021-2341]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Fix a javaws broken symlink [bsc#1195146]</changelog>
  <changelog author="pmonreal@suse.com" date="1647345601">- Update to Java 8.0 Service Refresh 7 Fix Pack 5 [bsc#1197126]
  * https://www.ibm.com/support/pages/java-sdk-security-vulnerabilities
    [bsc#1194927, CVE-2022-21366] [bsc#1194928, CVE-2022-21365]
    [bsc#1194929, CVE-2022-21360] [bsc#1196500, CVE-2022-21349]
    [bsc#1194941, CVE-2022-21341] [bsc#1194940, CVE-2022-21340]
    [bsc#1194939, CVE-2022-21305] [bsc#1194930, CVE-2022-21277]
    [bsc#1194931, CVE-2022-21299] [bsc#1194932, CVE-2022-21296]
    [bsc#1194933, CVE-2022-21282] [bsc#1194934, CVE-2022-21294]
    [bsc#1194935, CVE-2022-21293] [bsc#1194925, CVE-2022-21291]
    [bsc#1194937, CVE-2022-21283] [bsc#1194926, CVE-2022-21248]
    [CVE-2022-21271]</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to Java 8.0 Service Refresh 7 Fix Pack 6
  * Java Virtual Machine: Crash while generating javacore, or
    javacore contains 'Unable to walk in-flight data on call stack'
    instead of java stack
  * JIT Compiler:
  - Java JIT, bad field reference from a tenured object into
    the nursery
  - JIT compiler crash with vmstate=0x0005ff04
  * XML: Fix security vulnerability CVE-2022-21299</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to Java 8.0 Service Refresh 7 Fix Pack 10 [bsc#1201643]
  [bsc#1198671, CVE-2022-21476] [bsc#1198670, CVE-2022-21449]
  [bsc#1198673, CVE-2022-21496] [bsc#1198674, CVE-2022-21434]
  [bsc#1198672, CVE-2022-21426] [bsc#1198675, CVE-2022-21443]
  [bsc#1191912, CVE-2021-35561] [bsc#1194931, CVE-2022-21299]
  * Class Libraries:
  - BigDecimal gives incorrect arithmetic results for the add
    and subtract operations on the result of a divide
  * Java Virtual Machine:
  - jstacktrace sub-option of xtrace doesn't print java stack
    while doing method trace
  * Security:
  - 8217633: Configurable Extensions with system properties
  - 8241248: NullPointerException in com.ibm.jsse2.ssl.HKDF.extract
  - 8270344: Session resumption errors
  - 8277967: Validate the SSLLogger object in KeyShareExtension
  - JVM crashes computing Diffie-Hellman shared secrets and JNI
    errors while creating elliptic curve public key using IBMJCEPlus
  - Key Certificate Manager authority key identifier value incorrect
  - SSLv2Hello property value is ignored if specified in
    jdk.tls.disabledAlgorithms and SSLv2Hello is set by
    setEnabledProtocols()
  - There is a memory growth observed during digest operations
    using IBMJCEPlus as the provider.</changelog>
  <changelog author="pmonreal@suse.com" date="1660305600">- Update to Java 8.0 Service Refresh 7 Fix Pack 11 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Defect Fixes:
  - Java Virtual Machine: Long dely in AttachAPI</changelog>
  <changelog author="pmonreal@suse.com" date="1661774400">- Update to Java 8.0 Service Refresh 7 Fix Pack 15 [bsc#1202427]
  [bsc#1201684, CVE-2022-34169] [bsc#1201692, CVE-2022-21541]
  [bsc#1201685, CVE-2022-21549] [bsc#1201694, CVE-2022-21540]
  * Correction: These CVEs have been fixed in version 8.0-7.15 and
    not in 8.0-7.11 as mentioned in the previous changelog entry.</changelog>
  <changelog author="pmonreal@suse.com" date="1665748800">- Update to Java 8.0 Service Refresh 7 Fix Pack 16
  * Java Virtual Machine
  - Assertion failure at ClassLoaderRememberedSet.cpp
  - Assertion failure at StandardAccessBarrier.cpp when
  - Xgc:concurrentScavenge is set.
  - GC can have unflushed ownable synchronizer objects which
  can eventually lead to heap corruption and failure when
  - Xgc:concurrentScavenge is set.
  * JIT Compiler:
  - Incorrect JIT optimization of Java code
  - JAVA JIT Power: JIT compile time assert on AIX or LINUXPPC
  * Reliability and Serviceability:
  - javacore with "kill -3" SIGQUIT signal freezes Java process</changelog>
  <changelog author="pmonreal@suse.com" date="1668168000">- Update to Java 8.0 Service Refresh 7 Fix Pack 20 [bsc#1205302]
  [bsc#1204472, CVE-2022-21628] [bsc#1204471, CVE-2022-21626]
  [bsc#1204468, CVE-2022-21618] [bsc#1204480, CVE-2022-39399]
  [bsc#1204475, CVE-2022-21624] [bsc#1204473, CVE-2022-21619]
  * Security:
  - The IBM ORB Does Not Support Object-Serialisation Data Filtering
  - Large Allocation In CipherSuite
  - Avoid Evaluating Sslalgorithmconstraints Twice
  - Cache The Results Of Constraint Checks
  - An incorrect ShortBufferException is thrown by IBMJCEPlus,
    IBMJCEPlusFIPS during cipher update operation
  - Disable SHA-1 Signed Jars For Ea
  - JSSE Performance Improvement
  - Oracle Road Map Kerberos Deprecation Of 3DES And RC4 Encryption
  * Java 8/Orb:
  - Upgrade ibmcfw.jar To Version o2228.02
  * Class Libraries:
  - Crash In Libjsor.So During An Rdma Failover
  - High CPU Consumption Observed In ZosEventPort$EventHandlerTask.run
  - Update Timezone Information To The Latest tzdata2022c
  * Jit Compiler:
  - Crash During JIT Compilation
  - Incorrect JIT Optimization Of Java Code
  - Incorrect Return From Class.isArray()
  - Unexpected ClassCastException
  - Performance Regression When Calling VM Helper Code On X86
  * X/Os Extentions:
  - Add RSA-OAEP Cipher Function To IBMJCECCA</changelog>
  <changelog author="pmonreal@suse.com" date="1671105600">- IBM Security Update November 2022: [bsc#1205302, bsc#1204703]
  * The security vulnerability CVE-2022-3676 was fixed in version
    8.0.7.20, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1680523200">- Update to Java 8.0 Service Refresh 8: [bsc#1208480]
  * Security fixes: [bsc#1207246, CVE-2023-21835]
    [bsc#1207249, CVE-2023-21830] [bsc#1207248, CVE-2023-21843]
  * New Features/Enhancements:
  - Add RSA-PSS signature to IBMJCECCA.
  * Defect Fixes:
  - IJ45437 Service, Build, Packaging and Deliver: Getting
    FIPSRUNTIMEEXCEPTION when calling java code:
    MESSAGEDIGEST.GETINSTANCE("SHA256", "IBMJCEFIPS"); in MAC
  - IJ45272 Class Libraries: Fix security vulnerability CVE-2023-21843
  - IJ45280 Class Libraries: Update timezone information to the
    latest TZDATA2022F
  - IJ44896 Class Libraries: Update timezone information to the
    latest TZDATA2022G
  - IJ45436 Java Virtual Machine: Stack walking code gets into
    endless loop, hanging the application
  - IJ44079 Java Virtual Machine: When -DFILE.ENCODING is specified
    multiple times on the same command line the first option takes
    precedence instead of the last
  - IJ44532 JIT Compiler: Java JIT: Crash in DECREFERENCECOUNT()
    due to a NULL pointer
  - IJ44596 JIT Compiler: Java JIT: Invalid hard-coding of static
    final field object properties
  - IJ44107 JIT Compiler: JIT publishes new object reference to other
    threads without executing a memory flush
  - IX90193 ORB: Fix security vulnerability CVE-2023-21830
  - IJ44267 Security: 8273553: SSLENGINEIMPL.CLOSEINBOUND also has
    similar error of JDK-8253368
  - IJ45148 Security: code changes for tech preview
  - IJ44621 Security: Computing Diffie-Hellman secret repeatedly,
    using IBMJCEPLUS, causes a small memory leak
  - IJ44172 Security: Disable SHA-1 signed jars for EA
  - IJ44040 Security: Generating Diffie-Hellman key pairs repeatedly,
    using IBMJCEPLUS, Causes a small memory leak
  - IJ45200 Security: IBMJCEPLUS provider, during CHACHA20-POLY1305
    crypto operations, incorrectly throws an ILLEGALSTATEEXCEPTION
  - IJ45182 Security: IBMJCEPLUS provider fails in RSAPSS and ECDSA
    during signature operations resulting in Java cores
  - IJ45201 Security: IBMJCEPLUS provider failures (two) with AESGCM algorithm
  - IJ45202 Security: KEYTOOL NPE if signing certificate does not contain
    a SUBJECTKEYIDENTIFIER extension
  - IJ44075 Security: PKCS11KEYSTORE.JAVA - DOESPUBLICKEYMATCHPRIVATEKEY()
    method uses SHA1XXXX signature algorithms to match private and public keys
  - IJ45203 Security: RSAPSS multiple names for KEYTYPE
  - IJ43920 Security: The PKCS12 keystore update and the PBES2 support
  - IJ40002 XML: Fix security vulnerability CVE-2022-21426</changelog>
  <changelog author="pmonreal@suse.com" date="1682424000">- IBM Security Update April 2023: [bsc#1210711, CVE-2023-30441]
  * The security vulnerability CVE-2023-30441 was fixed in version
    8.0.7.15 as reported in the advisory, adding the reference here.</changelog>
  <changelog author="pmonreal@suse.com" date="1686052800">- Update to Java 8.0 Service Refresh 8 Fix Pack 5 [bsc#1210826]
  * Security Fixes:
  - IJ46965 Class Libraries: [bsc#1210628, CVE-2023-21930]
  - IJ46972 Class Libraries: [bsc#1210631, CVE-2023-21937]
  - IJ46974 Class Libraries: [bsc#1210632, CVE-2023-21938]
  - IJ46969 Class Libraries: [bsc#1210634, CVE-2023-21939]
  - IJ46971 Class Libraries: [bsc#1210637, CVE-2023-21968]
  - IJ47000 Java Virtual Machine: [bsc#1211615, CVE-2023-2597]
  - IJ46967 Security: [bsc#1210636, CVE-2023-21967]
  - Vulnerability in the Oracle Java SE, Oracle GraalVM
    Enterprise Edition product of Oracle Java SE (component:
    Hotspot). [bsc#1210635, CVE-2023-21954]
  * Defect Fixes:
  - IX90194 Java 8/Orb: ORB'S SOCKET TIMER THREAD HANGS IN COM.IBM.JSSE2
  - IJ47092 Class Libraries: DEPRECATION OF RDMA
  - IJ45888 Java Virtual Machine: ASSERTION FAILURE AT SCAVENGER.CPP
  - IJ46813 Java Virtual Machine: JVM'S SIGUSR2 SIGNAL HANDLER
    OVERWRITES NATIVE APP'S SIGUSR2 SIGNAL HANDLER
  - IJ47094 Java Virtual Machine: FIX THE MISMATCHED FLAGS IN THE
    STACKMAPS OF BYTECODE DURING THE BYTECODE VERIFICATION
  - IJ45583 Java Virtual Machine: SOME CODE FOR IBM JAVA 8 COMPILED
    WITH ARCH(10) ON Z/OS
  - IJ46192 JIT Compiler: CRASH WHEN USING IBMJCEPLUS WITH BALANCED GC
  - IJ45659 JIT Compiler: JAVA JIT: MISSING TYPE CHECKING ALLOWED
    INVALID OBJECT FIELD ACCESSES
  - IJ46620 Security: ADD NEW SUPPORT FOR RSAPSS SIGNATURES RECEIVED
    BY CERTPATH WITHIN OCSP RESPONSES
  - IJ45919 Security: DISABLE RSA KEY TRANSPORT CIPHER SUITES IN
    FIPS 140-3 TECH PREVIEW
  - IJ46173 Security: IBMJCEPLUS, IBMJCEPLUSFIPS PROVIDERS THROW AN
    INCORRECT JAVA.SECURITY.SIGNATUREEXCEPTION
  - IJ45883 Security: IBMJCEPLUSFIPS PROVIDER FAILS DURING SIGNATURE
    OPERATIONS USING NON FIPS140-2 COMPLIANT EC KEYS.
  - IJ45182 Security: IBMJCEPLUS PROVIDER FAILS IN RSAPSS DURING
    SIGNATURE OPERATIONS RESULTING IN JAVA CORES.
  - IJ46193 Security: SSLCONTEXT.GETINSTANCE FAILURES CAUSE
    JAVA.LANG.EXCEPTIONININITIALIZERERROR
  - IJ45599 Security: UPDATE IKEYMAN TO SUPPORT PBES2 AND OTHER MINOR
    FIXES
  - IJ45598 Security: UPDATE KDB FORMAT TO SUPPORT PBES2
  - IJ45789 Security: -XVERIFY:ALL CAUSES FAILURE IN JSSE
  - PH52970 z/OS Extentions: CHACHA20-POLY1305 CIPHER DECRYPTION CHUNK
    UPDATE FIX
  - PH52876 z/OS Extentions: RSA-PSS SIGNATURE SUPPORT FOR RSA HARDWARE
    KEYS OVER TLSV1.3</changelog>
</package>
<package pkgid="0559e3c5efd44d320a2623a3a95312f6b6f07cf299139b9b4cc786b5bc5c9de3" name="java-1_8_0-openjdk" arch="aarch64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="955f5fecf1713e400a0b69a2b2d20241093302b7af7f3548f0a037aaf52497fb" name="java-1_8_0-openjdk" arch="ppc64le">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="8b555a5e463c9c4345b33b80bcfffbebd18fbe8064892d5e1cac1c8e47b15cef" name="java-1_8_0-openjdk" arch="s390x">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="962cc95dbca35eb389c3dd8e6d5d4589e5efb7346341fa2a1bdc503fcd0575d0" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="36f5ef0a97095decf6ab576196c45962ad297b2d5dfd46b75b8fc414807cd9d6" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="4c6849ce0317fb733915eeaf77700b60f97781334812b236a9de273bfc92a02a" name="java-1_8_0-openjdk-accessibility" arch="aarch64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="6632c803fbed9ccaffde0acd73a09f5bbbbff4fccd0d9e9e3a57db747326373e" name="java-1_8_0-openjdk-accessibility" arch="ppc64le">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="b77d376e9cabedbce75f900a0d8d120b79053c4b5dace6c95048be76a5f4ea1d" name="java-1_8_0-openjdk-accessibility" arch="s390x">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="480bda1b6d9eeb14ed148003d6a7e0da586af75f352fa48c11cdaf3460c21763" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="2cf390723ff2d2963822b67f37f1a9e35a316abb276f5222e9ea8a0aa6de1103" name="java-1_8_0-openjdk-demo" arch="aarch64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="e5160d0e33a568f56f298efc13982d91cdfe02a884c70cb81cc8423bf98ba5cd" name="java-1_8_0-openjdk-demo" arch="ppc64le">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="eed617b425331bad7b6a83526babdc91c39a15f58319f4ab8c9bae6236f8308b" name="java-1_8_0-openjdk-demo" arch="s390x">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="a0214de48b7dc69119b0ed7f5e6a8d5c5813fc0f94a6daac3347c63b86b15260" name="java-1_8_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="1240329eb86280a310ef9b206b70c6d0869c7c263c9165f56336d46d55bee2f4" name="java-1_8_0-openjdk-devel" arch="aarch64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="66fcc5b64736cb01ee6113656fb6da0149beeee01c15e71bc097ab65f893e52c" name="java-1_8_0-openjdk-devel" arch="ppc64le">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="00dcfa53f3f0a7e18c9037142cc258bd88281b19b2aa63d39b9f5f244dcb26f7" name="java-1_8_0-openjdk-devel" arch="s390x">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="99a537af2f66776cf06114aa4196ee0f0328dd92469565e31b64d05b4487a52a" name="java-1_8_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="f347245727bf84aede8a89a66314bd5a7be92ae25cc7ad4321414f18a9d6d822" name="java-1_8_0-openjdk-headless" arch="aarch64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="243990de67d2198730826371e9e59d6d33dde00b0853a1a1b9561dc190237c8b" name="java-1_8_0-openjdk-headless" arch="ppc64le">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="1912cc5a43368f3d07e2f320d502164ecb3d4cb1050636e442d875ea19227725" name="java-1_8_0-openjdk-headless" arch="s390x">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="6573e23f7dca93739b5aeb807dda4a57ab49a3eced11131982ed08cf235e354d" name="java-1_8_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="86d696fd81a47ef9c2685c52149ad77159eddeb0f96527b91d1395b34ee8764f" name="java-1_8_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="fcc95c60d77b404d5b06f05fde574aefa07e6af1f3385bbdc537e408c76e95c4" name="java-1_8_0-openjdk-src" arch="aarch64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="25affa6e5b6e4e21fe2f05a0fb2a2d57c848d3242e3a286b4423f75bff188753" name="java-1_8_0-openjdk-src" arch="ppc64le">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="fbb9caddbee13292faf20c6e6c7f1819ba33674a5498201219c7b2d8c7d578f4" name="java-1_8_0-openjdk-src" arch="s390x">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="8c55b70767b8123bcdab3290172cdaa204cf496b7b2e5e904d8a3cedc5d32330" name="java-1_8_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.372" rel="150000.3.79.1"/>
  <changelog author="fstrba@suse.com" date="1606392000">- Update to version jdk8u275 (icedtea 3.17.1)
  * Import of OpenJDK 8 u275 build 01
    + JDK-8214440, bsc#1179441: ldap over a TLS connection negotiate
    failed with "javax.net.ssl.SSLPeerUnverifiedException:
    hostname of the server "does not match the hostname in the
    server's certificate"
    + JDK-8223940: Private key not supported by chosen signature
    algorithm
    + JDK-8236512: PKCS11 Connection closed after Cipher.doFinal
    and NoPadding
    + JDK-8250861: Crash in MinINode::Ideal(PhaseGVN*, bool)
  * Bug fixes
    + PR3815: Fix new s390 size_t issue in
    g1ConcurrentMarkObjArrayProcessor.cpp
- Removed patches:
  * JDK-8250861.patch
  * s390.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1612785600">- Update to version jdk8u282 (icedtea 3.18.0)
  * January 2021 CPU (bsc#1181239)
  * Security fixes
    + JDK-8247619: Improve Direct Buffering of Characters
  * Import of OpenJDK 8 u282 build 01
    + JDK-6962725: Regtest javax/swing/JFileChooser/6738668/
    /bug6738668.java fails under Linux
    + JDK-8025936: Windows .pdb and .map files does not have proper
    dependencies setup
    + JDK-8030350: Enable additional compiler warnings for GCC
    + JDK-8031423: Test java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails by Timeout on Windows
    + JDK-8036122: Fix warning 'format not a string literal'
    + JDK-8051853: new
    URI("x/").resolve("..").getSchemeSpecificPart() returns null!
    + JDK-8132664: closed/javax/swing/DataTransfer/DefaultNoDrop/
    /DefaultNoDrop.java locks on Windows
    + JDK-8134632: Mark javax/sound/midi/Devices/
    /InitializationHang.java as headful
    + JDK-8148854: Class names "SomeClass" and "LSomeClass;"
    treated by JVM as an equivalent
    + JDK-8148916: Mark bug6400879.java as intermittently failing
    + JDK-8148983: Fix extra comma in changes for JDK-8148916
    + JDK-8160438: javax/swing/plaf/nimbus/8057791/bug8057791.java
    fails
    + JDK-8165808: Add release barriers when allocating objects
    with concurrent collection
    + JDK-8185003: JMX: Add a version of
    ThreadMXBean.dumpAllThreads with a maxDepth argument
    + JDK-8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + JDK-8207766: [testbug] Adapt tests for Aix.
    + JDK-8212070: Introduce diagnostic flag to abort VM on failed
    JIT compilation
    + JDK-8213448: [TESTBUG] enhance jfr/jvm/TestDumpOnCrash
    + JDK-8215727: Restore JFR thread sampler loop to old /
    previous behavior
    + JDK-8220657: JFR.dump does not work when filename is set
    + JDK-8221342: [TESTBUG] Generate Dockerfile for docker testing
    + JDK-8224502: [TESTBUG] JDK docker test TestSystemMetrics.java
    fails with access issues and OOM
    + JDK-8231209: [REDO] ThreadMXBean::getThreadAllocatedBytes()
    can be quicker for self thread
    + JDK-8231968: getCurrentThreadAllocatedBytes default
    implementation s/b getThreadAllocatedBytes
    + JDK-8232114: JVM crashed at imjpapi.dll in native code
    + JDK-8234270: [REDO] JDK-8204128 NMT might report incorrect
    numbers for Compiler area
    + JDK-8234339: replace JLI_StrTok in java_md_solinux.c
    + JDK-8238448: RSASSA-PSS signature verification fail when
    using certain odd key sizes
    + JDK-8242335: Additional Tests for RSASSA-PSS
    + JDK-8244225: stringop-overflow warning on strncpy call from
    compile_the_world_in
    + JDK-8245400: Upgrade to LittleCMS 2.11
    + JDK-8248214: Add paddings for TaskQueueSuper to reduce
    false-sharing cache contention
    + JDK-8249176: Update GlobalSignR6CA test certificates
    + JDK-8250665: Wrong translation for the month name of May in
    ar_JO,LB,SY
    + JDK-8250928: JFR: Improve hash algorithm for stack traces
    + JDK-8251469: Better cleanup for
    test/jdk/javax/imageio/SetOutput.java
    + JDK-8251840: Java_sun_awt_X11_XToolkit_getDefaultScreenData
    should not be in make/mapfiles/libawt_xawt/mapfile-vers
    + JDK-8252384: [TESTBUG] Some tests refer to COMPAT provider
    rather than JRE
    + JDK-8252395: [8u] --with-native-debug-symbols=external
    doesn't include debuginfo files for binaries
    + JDK-8252497: Incorrect numeric currency code for ROL
    + JDK-8252754: Hash code calculation of JfrStackTrace is
    inconsistent
    + JDK-8252904: VM crashes when JFR is used and JFR event class
    is transformed
    + JDK-8252975: [8u] JDK-8252395 breaks the build for
  - -with-native-debug-symbols=internal
    + JDK-8253284: Zero OrderAccess barrier mappings are incorrect
    + JDK-8253550: [8u] JDK-8252395 breaks the build for make
    STRIP_POLICY=no_strip
    + JDK-8253752: test/sun/management/jmxremote/bootstrap/
    /RmiBootstrapTest.java fails randomly
    + JDK-8254081: java/security/cert/PolicyNode/
    /GetPolicyQualifiers.java fails due to an expired certificate
    + JDK-8254144: Non-x86 Zero builds fail with return-type
    warning in os_linux_zero.cpp
    + JDK-8254166: Zero: return-type warning in
    zeroInterpreter_zero.cpp
    + JDK-8254683: [TEST_BUG] jdk/test/sun/tools/jconsole/
    /WorkerDeadlockTest.java fails
    + JDK-8255003: Build failures on Solaris
  * Import of OpenJDK 8 u282 build 02
    + JDK-8253837: JFR 8u fix symbol and cstring hashtable equals
    implementaion
    + JDK-8255269: Unsigned overflow in g1Policy.cpp
  * Import of OpenJDK 8 u282 build 03
    + JDK-8163161: [PIT][TEST_BUG] increase timeout in
    javax/swing/plaf/nimbus/8057791/bug8057791.java
    + JDK-8168292: [TESTBUG] [macosx] Test
    java/awt/TrayIcon/DragEventSource/DragEventSource.java fails
    on OS X
    + JDK-8168682: jdk/test/java/lang/ClassLoader/forNameLeak/
    /ClassForNameLeak.java fails with -Xcomp
    + JDK-8223108: Test java/awt/EventQueue/
    /NonComponentSourcePost.java is unstable
    + JDK-8255603: Memory/Performance regression after JDK-8210985
  * Import of OpenJDK 8 u282 build 04
    + JDK-8022535: [TEST BUG] javax/swing/text/html/parser/
    /Test8017492.java fails
    + JDK-8043899: compiler/5091921/Test7005594.java fails if
    specified -Xmx is less than 1600m
    + JDK-8046221: [TEST_BUG] Cleanup datatransfer tests
    + JDK-8058805: [TEST_BUG]Test java/awt/TrayIcon/SecurityCheck/
    /NoPermissionTest/NoPermissionTest.java fails
    + JDK-8068275: Some tests failed after JDK-8063104
    + JDK-8069211: (zipfs) ZipFileSystem creates corrupted zip if
    entry output stream gets closed more than once
    + JDK-8130772: Util.hitMnemonics does not work:
    getSystemMnemonicKeyCodes() returns ALT_MASK rather than
    VK_ALT
    + JDK-8156803: Turn StressLCM/StressGCM flags to diagnostic
    + JDK-8160761: [TESTBUG] Several compiler tests fail with
    product bits
    + JDK-8166015: [PIT][TEST_BUG] stray character in java/awt/
    /Focus/ModalDialogActivationTest/
    /ModalDialogActivationTest.java
    + JDK-8166583: Add oopDesc::klass_or_null_acquire()
    + JDK-8166663: Simplify oops_on_card_seq_iterate_careful
    + JDK-8166862: CMS needs klass_or_null_acquire
    + JDK-8179083: Uninitialized notifier in Java Monitor Wait
    tracing event
    + JDK-8205507: jdk/javax/xml/crypto/dsig/GenerationTests.java
    timed out
    + JDK-8217362: Emergency dump does not work when disk=false is
    set
    + JDK-8217766: Container Support doesn't work for some Join
    Controllers combinations
    + JDK-8219013: Update Apache Santuario (XML Signature) to
    version 2.1.3
    + JDK-8219562: Line of code in osContainer_linux.cpp L102
    appears unreachable
    + JDK-8220579: [Containers] SubSystem.java out of sync with
    osContainer_linux.cpp
    + JDK-8221340: [TESTBUG] TestCgroupMetrics.java fails after fix
    for JDK-8219562
    + JDK-8221710: [TESTBUG] more configurable parameters for
    docker testing
    + JDK-8227006: [linux] Runtime.availableProcessors execution
    time increased by factor of 100
    + JDK-8229868: Update Apache Santuario TPRM version
    + JDK-8233548: Update CUP to v0.11b
    + JDK-8242480: Negative value may be returned by
    getFreeSwapSpaceSize() in the docker
    + JDK-8246648: issue with OperatingSystemImpl
    getFreeSwapSpaceSize in docker after 8242480
    + JDK-8249846: Change of behavior after JDK-8237117: Better
    ForkJoinPool behavior
    + JDK-8250636: iso8601_time returns incorrect offset part on
    MacOS
    + JDK-8251365: Build failure on AIX after 8250636
    + JDK-8255717: Fix JFR crash in WriteObjectSampleStacktrace due
    to object not initialized
    + JDK-8256618: Zero: Linux x86_32 build still fails
    + JDK-8256671: Incorrect assignment operator used in
    guarantee() in genCollectedHeap
    + JDK-8256752: 8252395 incorrect copy rule for macos .dSYM
    folder
    + JDK-8257397: [TESTBUG] test/lib/containers/docker/Common.java
    refers to -Xlog:os+container=trace
  * Import of OpenJDK 8 u282 build 05
    + JDK-8254982: (tz) Upgrade time-zone data to tzdata2020c
  * Import of OpenJDK 8 u282 build 06
    + JDK-8255226: (tz) Upgrade time-zone data to tzdata2020d
  * Import of OpenJDK 8 u282 build 07
    + JDK-8225072: Add LuxTrust certificate that is expiring in
    March 2021 to list of allowed but expired certs
    + JDK-8239105: Add exception for expiring Digicert root
    certificates to VerifyCACerts test
    + JDK-8258630: Add expiry exception for QuoVadis root
    certificate
  * Bug fixes
    + PR3819: Installation can't handle existing tapset symlinks
  * Shenandoah
    + Shenandoah: Fix racy update of code roots
  * AArch32 port
    + JDK-8253036: Support building the Zero assembler port on
    AArch64</changelog>
  <changelog author="fstrba@suse.com" date="1620993600">- Update to version jdk8u292 (icedtea 3.19.0)
  * April 2021 CPU
  * Security fixes
    + JDK-8227467: Better class method invocations
    + JDK-8244473: Contextualize registration for JNDI
    + JDK-8244543: Enhanced handling of abstract classes
    + JDK-8249906, CVE-2021-2163, bsc#1185055: Enhance opening JARs
    + JDK-8250568, CVE-2021-2161, bsc#1185056: Less ambiguous
    processing
    + JDK-8253799: Make lists of normal filenames
  * New features
    + PR3835: Populate unique SystemTap suffix from configure
  * Import of OpenJDK 8 u292 build 01
    + JDK-6949753: [TEST BUG]: java/awt/print/PageFormat/
    /PDialogTest.java needs update by removing a infinite loop
    + JDK-8031126: java/lang/management/ThreadMXBean/
    /ThreadUserTime.java fails intermittently
    + JDK-8035166: Remove dependency on EC classes from pkcs11
    provider
    + JDK-8035186: j2se_jdk/jdk/test/java/lang/invoke/lambda/
    /LogGeneratedClassesTest.java - assertion error
    + JDK-8078450: Implement consistent process for quarantine of
    tests
    + JDK-8080953: [TEST_BUG]Test java/awt/FontClass/DebugFonts.java
    fails due to wrongly typed bugid
    + JDK-8081547: Prepare client libs regression tests for running
    in a concurrent, headless jtreg environment
    + JDK-8141457: keytool default cert fingerprint algorithm should
    be SHA-256
    + JDK-8150204: (fs) Enhance java/nio/file/Files/
    /probeContentType/Basic.java debugging output
    + JDK-8160217: JavaSound should clean up resources better
    + JDK-8163363: AArch64: Stack size in tools/launcher/
    /Settings.java needs to be adjusted
    + JDK-8167281: IIOMetadataNode bugs in getElementsByTagName and
    NodeList.item methods
    + JDK-8168996: C2 crash at postaloc.cpp:140 : assert(false)
    failed: unexpected yanked node
    + JDK-8185934: keytool shows "Signature algorithm:
    SHA1withECDSA, -1-bit key"
    + JDK-8186090: java.nio.Bits.unaligned() doesn't handle aarch64
    + JDK-8195685: AArch64 port of 8174962: Better interface
    invocations
    + JDK-8202343: Disable TLS 1.0 and 1.1
    + JDK-8211339: NPE during SSL handshake caused by
    HostnameChecker
    + JDK-8216987: ciMethodData::load_data() unpacks MDOs with
    non-atomic copy
    + JDK-8217338: [Containers] Improve systemd slice memory limit
    support
    + JDK-8223186: HotSpot compile warnings from GCC 9
    + JDK-8225805: Java Access Bridge does not close the logger
    + JDK-8226899: Problemlist compiler/rtm tests
    + JDK-8227642: [TESTBUG] Make docker tests podman compatible
    + JDK-8228434: jdk/net/Sockets/Test.java fails after JDK-8227642
    + JDK-8229284: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java fails for - memory:getMemoryUsage
    + JDK-8230388: Problemlist additional compiler/rtm tests
    + JDK-8233228: Disable weak named curves by default in TLS,
    CertPath, and Signed JAR
    + JDK-8234727: sun/security/ssl/X509TrustManagerImpl tests
    support TLSv1.3
    + JDK-8234728: Some security tests should support TLSv1.3
    + JDK-8235874: The ordering of Cipher Suites is not maintained
    provided through jdk.tls.client.cipherSuites and
    jdk.tls.server.cipherSuites system property.
    + JDK-8238579: HttpsURLConnection drops the timeout and hangs
    forever in read
    + JDK-8242141: New System Properties to configure the TLS
    signature schemes
    + JDK-8244621: [macos10.15] Garbled FX printing plus CoreText
    warnings on Catalina when building with Xcode 11
    + JDK-8249183: JVM crash in "AwtFrame::WmSize" method
    + JDK-8249588: libwindowsaccessbridge issues on 64bit Windows
    + JDK-8250984: Memory Docker tests fail on some Linux kernels
    w/o cgroupv1 swap limit capabilities
    + JDK-8251397: NPE on ClassValue.ClassValueMap.cacheArray
    + JDK-8252470: java/awt/dnd/DisposeFrameOnDragCrash/
    /DisposeFrameOnDragTest.java fails on Windows
    + JDK-8253368: TLS connection always receives close_notify
    exception
    + JDK-8253476: TestUseContainerSupport.java fails on some Linux
    kernels w/o swap limit capabilities
    + JDK-8253932: SSL debug log prints incorrect caller info
    + JDK-8254854: [cgroups v1] Metric limits not properly detected
    on some join controller combinations
    + JDK-8255908: ExceptionInInitializerError due to
    UncheckedIOException while initializing cgroupv1 subsystem
    + JDK-8255937: Better cleanup for test/jdk/javax/imageio/stream/
    /StreamFlush.java
    + JDK-8256642: [TEST_BUG] jdk/test/javax/sound/midi/MidiSystem/
    /DefaultProperties.java failed
    + JDK-8257192: Integrate AArch64 JIT port into 8u
    + JDK-8258079: Eliminate ParNew's use of klass_or_null()
    + JDK-8258241: [8u] Missing doPrivileged() hunks from
    JDK-8226575
    + JDK-8258396: SIGILL in jdk.jfr.internal.PlatformRecorder
    .rotateDisk()
    + JDK-8258430: 8u backport of JDK-8063107 missing test/javax/
    /swing/JRadioButton/8041561/bug8041561.java changes
    + JDK-8258933: G1 needs klass_or_null_acquire
    + JDK-8259312: VerifyCACerts.java fails as soneraclass2ca cert
    will
    + JDK-8259384: CUP version wrong in THIRD_PARTY_README after
    JDK-8233548
    + JDK-8259568: PPC64 builds broken after JDK-8221408 8u backport
  * Import of OpenJDK 8 u292 build 02
    + JDK-8078614: WindowsClassicLookAndFeel MetalComboBoxUI
    .getbaseLine fails with IllegalArgumentException
    + JDK-8198334: java/awt/FileDialog/8003399/bug8003399.java fails
    in headless mode
    + JDK-8249251: [dark_mode ubuntu 20.04] The selected menu is not
    highlighted in GTKLookAndFeel
    + JDK-8250582: Revert Principal Name type to NT-UNKNOWN when
    requesting TGS Kerberos tickets
    + JDK-8258833: Cancel multi-part cipher operations in SunPKCS11
    after failures
  * Import of OpenJDK 8 u292 build 03
    + JDK-8145051: Wrong parameter name in synthetic lambda method
    leads to verifier error
    + JDK-8172404: Tools should warn if weak algorithms are used
    before restricting them
    + JDK-8209333: Socket reset issue for TLS 1.3 socket close
    + JDK-8219991: New fix of the deadlock in
    sun.security.ssl.SSLSocketImpl
    + JDK-8239091: Reversed arguments in call to strstr in freetype
    "debug" code.
    + JDK-8240827: Downport SSLSocketImpl.java from "8221882: Use
    fiber-friendly java.util.concurrent.locks in JSSE"
    + JDK-8255880: UI of Swing components is not redrawn after their
    internal state changed
    + JDK-8256682: JDK-8202343 is incomplete
    + JDK-8260930: AARCH64: Invalid value passed to critical JNI
    function
  * Import of OpenJDK 8 u292 build 04
    + JDK-8061777: (zipfs) IllegalArgumentException in ZipCoder
    .toString when using Shitft_JIS
    + JDK-8158525: Update a few java/net tests to use the loopback
    address instead of the host address
    + JDK-8171410: aarch64: long multiplyExact shifts by 31 instead
    of 63
    + JDK-8225435: Upgrade IANA Language Subtag Registry to the
    latest for JDK14
    + JDK-8235263: Revert TLS 1.3 change that wrapped IOExceptions
    + JDK-8235311: Tag mismatch may alert bad_record_mac
    + JDK-8236500: Windows ucrt.dll should be looked up in versioned
    WINSDK subdirectory
    + JDK-8260349: Cannot programmatically retrieve Metaspace max
    set via JAVA_TOOL_OPTIONS
    + JDK-8261766: [8u] hotspot needs to recognise cl.exe 19.16 to
    build with VS2017
    + JDK-8262075: sun/security/krb5/auto/UseCacheAndStoreKey.java
    timed out intermittently
  * Import of OpenJDK 8 u292 build 05
    + JDK-6345095: regression test EmptyClipRenderingTest fails
    + JDK-6896810: TEST_BUG: java/lang/ref/SoftReference/Pin.java
    fails with OOME during System.out.println
    + JDK-7107012: sun.jvm.hostspot.code.CompressedReadStream
    readDouble() conversion to long mishandled
    + JDK-7112454: TEST_BUG: java/awt/Choice/
    /PopdownGeneratesMouseEvents/PopdownGeneratesMouseEvents.html
    failed
    + JDK-7131835: [TEST_BUG] Test does not consider that the
    rounded edges of the window in Mac OS 10.7
    + JDK-7185221: [macosx] Regtest should not throw exception if
    a suitable display mode found
    + JDK-8041464: [TEST_BUG] CustomClassLoaderTransferTest does not
    support OS X
    + JDK-8078024: javac, several incorporation steps are silently
    failing when an error should be reported
    + JDK-8129626: G1: set_in_progress() and clear_started() needs
    a barrier on non-TSO platforms
    + JDK-8211301: [macos] support full window content options
    + JDK-8240353: AArch64: missing support for
  - XX:+ExtendedDTraceProbes in C1
    + JDK-8248336: AArch64: C2: offset overflow in BoxLockNode::emit
    + JDK-8257746: Regression introduced with JDK-8250984 - memory
    might be null in some machines
    + JDK-8261231: Windows IME was disabled after DnD operation
    + JDK-8262073: assert(allocates2(pc)) failed: not in CodeBuffer
    memory
  * Import of OpenJDK 8 u292 build 06
    + JDK-8259048: (tz) Upgrade time-zone data to tzdata2020f
  * Import of OpenJDK 8 u292 build 07
    + JDK-8263008: AARCH64: Add debug info for libsaproc.so
  * Import of OpenJDK 8 u292 build 08
    + JDK-8191915: JCK tests produce incorrect results with C2
    + JDK-8256421: Add 2 HARICA roots to cacerts truststore
    + JDK-8260356: (tz) Upgrade time-zone data to tzdata2021a
  * Import of OpenJDK 8 u292 build 09
    + JDK-8264171: Missing aarch64 parts of JDK-8236179 (C1 register
    allocation failure with T_ADDRESS)
  * Import of OpenJDK 8 u292 build 10
    + JDK-8258247: Couple of issues in fix for JDK-8249906
    + JDK-8259428: AlgorithmId.getEncodedParams() should return copy
    + JDK-8261183: Follow on to Make lists of normal filenames
  * Backports
    + JDK-8250825, PR3837: C2 crashes with assert(field != __null)
    failed: missing field
    + JDK-8255466, PR3837: C2 crashes at ciObject::get_oop()
    const+0x0
  * Bug fixes
    + PR3822: Update elliptic curve patch to handle
    jdk.disabled.namedCurves (JDK-8233228) &amp; file movement
    (JDK-8035166)
    + PR3836: Extra compiler flags not passed to adlc build
    + PR3838: Bogus -Wnonnull warning on Zero builds
    + PR3839: Make -Wnonnull warnings on ppc64 non-fatal for
    now
  * Shenandoah
    + [backport] 8202976: Add C1 lea patching support for x86
    + [backport] 8221507: Implement JFR Events for Shenandoah
    + [backport] 8224573: Fix windows build after JDK-8221507
    + [backport] 8228369: Shenandoah: Refactor LRB C1 stubs
    + [backport] 8229474: Shenandoah: Cleanup CM::update_roots()
    + [backport] 8229709: x86_32 build and test failures after
    JDK-8228369 (Shenandoah: Refactor LRB C1 stubs)
    + [backport] 8231087: Shenandoah: Self-fixing load reference
    barriers for C1/C2
    + [backport] 8232747: Shenandoah: Concurrent GC should
    deactivate SATB before processing weak roots
    + [backport] 8232992: Shenandoah: Implement self-fixing
    interpreter LRB
    + [backport] 8233021: Shenandoah: SBSC2::is_shenandoah_lrb_call
    should match all LRB shapes
    + [backport] 8233165:
    Shenandoah:SBSA::gen_load_reference_barrier_stub() should use
    pointer register for address on aarch64
    + [backport] 8233574: Shenandoah: build is broken without jfr
    + [backport] 8237837: Shenandoah: assert(mem == __null) failed:
    only one safepoint
    + [backport] 8238153: CTW: C2 (Shenandoah) compilation fails
    with "Unknown node in get_load_addr: CreateEx"
    + [backport] 8238851: Shenandoah: C1: Resolve into registers of
    correct type
    + [backport] 8240315: Shenandoah:
    Rename ShLBN::get_barrier_strength()
    + [backport] 8240751: Shenandoah: fold ShenandoahTracer
    definition
    + [backport] 8241765: Shenandoah: AARCH64 need to
    save/restore call clobbered registers before calling keepalive
    barrier
    + [backport] 8244510: Shenandoah: invert SHC2Support::is_in_cset
    condition
    + [backport] 8244663: Shenandoah: C2 assertion fails in
    Matcher::collect_null_checks
    + [backport] 8244721: CTW: C2 (Shenandoah) compilation fails
    with "unexpected infinite loop graph shape"
    + [backport] 8251451: Shenandoah: Remark ObjectSynchronizer
    roots with I-U
    + [backport] 8252660: Shenandoah: support manageable
    SoftMaxHeapSize option
    + [backport] 8253224: Shenandoah: ShenandoahStrDedupQueue
    destructor calls virtual num_queues()
    + [backport] 8253778:
    ShenandoahSafepoint::is_at_shenandoah_safepoint should not
    access VMThread state from other threads
    + [backport] 8255457: Shenandoah: cleanup ShenandoahMarkTask
    + [backport] 8255760: Shenandoah: match constants style in
    ShenandoahMarkTask fallback
    + [backport] 8256806: Shenandoah: optimize shenandoah/jni/
    /TestPinnedGarbage.java test
    + [backport] 8257641: Shenandoah:
    Query is_at_shenandoah_safepoint() from control thread should
    return false
    + Fix racy update of code roots
    + Fix register allocation for thread register is 32bit LRB
    + Fix Shenandoah bindings in ADLC formssel
    + Normalise whitespace in AArch64 sources prior to merge of
    upstreamed version in 8u292-b01.
    + Revert differences against upstream 8u
    + Shenandoah: Backed out weak roots cleaning during full gc
  * AArch64 port
    + Normalise AArch64 sources, prior to merge of upstream version.</changelog>
  <changelog author="fstrba@suse.com" date="1622203200">- Added patch:
  * tls13extensions.patch
    + make tlsv1.2 client hello not emit the optional tlsv1.3
    extensions (fixes bsc#1184639)</changelog>
  <changelog author="fstrba@suse.com" date="1627473600">- Update to version jdk8u302 (icedtea 3.20.0)
  * July 2021 CPU
  * Security fixes
    + JDK-8256157: Improve bytecode assembly
    + JDK-8256491: Better HTTP transport
    + JDK-8258432, CVE-2021-2341, bsc#1188564: Improve file
    transfers
    + JDK-8260453: Improve Font Bounding
    + JDK-8260960: Signs of jarsigner signing
    + JDK-8260967, CVE-2021-2369, bsc#1188565: Better jar file
    validation
    + JDK-8262380: Enhance XML processing passes
    + JDK-8262403: Enhanced data transfer
    + JDK-8262410: Enhanced rules for zones
    + JDK-8262477: Enhance String Conclusions
    + JDK-8262967: Improve Zip file support
    + JDK-8264066, CVE-2021-2388, bsc#1188566: Enhance compiler
    validation
    + JDK-8264079: Improve abstractions
    + JDK-8264460: Improve NTLM support
  * Import of OpenJDK 8 u302 build 01
    + JDK-6878250: (so) IllegalBlockingModeException thrown when
    reading from a closed SocketChannel's InputStream
    + JDK-7059970: Test case: javax/imageio/plugins/png/
    /ITXtTest.java is not closing a file
    + JDK-8030123: java/beans/Introspector/Test8027648.java fails
    + JDK-8033289: clang: clean up unused function warning
    + JDK-8036095: RMI tests using testlibrary.RMID and
    testlibrary.JavaVM do not pass through vmoptions
    + JDK-8042891: Format issues embedded in macros for two g1
    source files
    + JDK-8055754: filemap.cpp does not compile with clang
    + JDK-8064909: FragmentMetaspace.java got OutOfMemoryError
    + JDK-8066508: JTReg tests timeout on slow devices when run
    using JPRT
    + JDK-8066807: langtools/test/Makefile should use -agentvm not
  - samevm
    + JDK-8071374: -XX:+PrintAssembly -XX:+PrintSignatureHandlers
    crash fastdebug VM with assert(limit == __null || limit &lt;=
    nm-&gt;code_end()) in RelocIterator::initialize
    + JDK-8073446: TimeZone getOffset API does not  return a dst
    offset between years 2038-2137
    + JDK-8075071: [TEST_BUG] TimSortStackSize2.java: OOME: Java
    heap space: MaxHeap shrinked by MaxRAMFraction
    + JDK-8077364: "if( !this )" construct prevents build on Xcode
    6.3
    + JDK-8130308: Too low memory usage in
    TestPromotionFromSurvivorToTenuredAfterMinorGC.java
    + JDK-8132148: G1 hs_err region dump legend out of sync with
    region values
    + JDK-8132709: [TESTBUG] gc/g1/TestHumongousShrinkHeap.java
    might fail on embedded
    + JDK-8134672: [TEST_BUG] Some tests should check
    isDisplayChangeSupported
    + JDK-8134883: C1 hard crash in range check elimination in
    Nashorn test262parallel
    + JDK-8136592: [TEST_BUG] Fix 2 platform-specific closed
    regtests for jigsaw
    + JDK-8151786: [TESTBUG] java/beans/XMLEncoder/Test4625418.java
    timed out intermittently
    + JDK-8159898: Negative array size in
    java/beans/Introspector/Test8027905.java
    + JDK-8166046: [TESTBUG] compiler/stringopts/
    /TestStringObjectInitialization.java fails with OOME
    + JDK-8166724: gc/g1/TestHumongousShrinkHeap.java fails with
    OOME
    + JDK-8177809: File.lastModified() is losing milliseconds
    (always ends in 000)
    + JDK-8178403: DirectAudio in JavaSound may hang and leak
    + JDK-8180478: tools/launcher/MultipleJRE.sh fails on Windows
    because of extra-''
    + JDK-8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + JDK-8190332: PngReader throws NegativeArraySizeException/OOM
    error when IHDR width is very large
    + JDK-8190679: java/util/Arrays/TimSortStackSize2.java fails
    with "Initial heap size set to a larger value than the maximum
    heap size"
    + JDK-8191955: AArch64: incorrect prefetch distance causes an
    internal error
    + JDK-8199265: java/util/Arrays/TimSortStackSize2.java fails
    with OOM
    + JDK-8200550: Xcode 9.3 produce warning -Wexpansion-to-defined
    + JDK-8203196: C1 emits incorrect code due to integer overflow
    in _tableswitch keys
    + JDK-8205014: com/sun/jndi/ldap/DeadSSLLdapTimeoutTest.java
    failed with "Read timed out"
    + JDK-8209996: [PPC64] Fix JFR profiling
    + JDK-8214345: infinite recursion while checking super class
    + JDK-8217230: assert(t == t_no_spec) failure in
    NodeHash::check_no_speculative_types()
    + JDK-8217348: assert(thread-&gt;is_Java_thread()) failed: just
    checking
    + JDK-8225081: Remove Telia Company CA certificate expiring in
    April 2021
    + JDK-8225116: Test OwnedWindowsLeak.java intermittently fails
    + JDK-8230428: Cleanup dead CastIP node code in formssel.cpp
    + JDK-8231631: sun/net/ftp/FtpURLConnectionLeak.java fails
    intermittently with NPE
    + JDK-8231841: AArch64: debug.cpp help() is missing an AArch64
    line for pns
    + JDK-8231949: [PPC64, s390]: Make async profiling more reliable
    + JDK-8234011: (zipfs) Memory leak in
    ZipFileSystem.releaseDeflater()
    + JDK-8241649: Optimize Character.toString
    + JDK-8243559: Remove root certificates with 1024-bit keys
    + JDK-8247350: [aarch64] assert(false) failed: wrong size of
    mach node
    + JDK-8249278: Revert JDK-8226253 which breaks the spec of
    AccessibleState.SHOWING for JList
    + JDK-8255086: Update the root locale display names
    + JDK-8255734: VM should ignore SIGXFSZ on ppc64, s390 too
    + JDK-8257999: Parallel GC crash in gc/parallel/
    /TestDynShrinkHeap.java: new region is not in covered_region
    + JDK-8258419: RSA cipher buffer cleanup
    + JDK-8258669: fastdebug jvm crashes when do event based
    tracing for monitor inflation
    + JDK-8258753: StartTlsResponse.close() hangs due to
    synchronization issues
    + JDK-8259271: gc/parallel/TestDynShrinkHeap.java still fails
    "assert(covered_region.contains(new_memregion)) failed: new
    region is not in covered_region"
    + JDK-8259619: C1: 3-arg StubAssembler::call_RT stack-use
    condition is incorrect
    + JDK-8259886: Improve SSL session cache performance and
    scalability
    + JDK-8260029: aarch64: fix typo in verify_oop_array
    + JDK-8260236: better init AnnotationCollector _contended_group
    + JDK-8260255: C1: LoopInvariantCodeMotion constructor can
    leave some fields uninitialized
    + JDK-8260484: CheckExamples.java / NoJavaLangTest.java fail
    with jtreg 4.2
    + JDK-8260704: ParallelGC: oldgen expansion needs release-store
    for _end
    + JDK-8261355: No data buffering in SunPKCS11 Cipher encryption
    when the underlying mechanism has no padding
    + JDK-8261867: Backport relevant test changes &amp; additions from
    JDK-8130125
    + JDK-8262110: DST starts from incorrect time in 2038
    + JDK-8262726: AArch64: C1 StubAssembler::call_RT can corrupt
    stack
    + JDK-8262730: Enable jdk8u MacOS external debug symbols
    + JDK-8262864: No debug symbols in image for Windows
  - -with-native-debug-symbols=external
    + JDK-8263061: copy wrong unpack200 debuginfo to bin directory
    after 8252395
    + JDK-8263504: Some OutputMachOpcodes fields are uninitialized
    + JDK-8263600: change rmidRunning to a simple lookup
    + JDK-8264509: jdk8u MacOS zipped debug symbols won't build
    + JDK-8264562: assert(verify_field_bit(1)) failed: Attempting
    to write an uninitialized event field: type
    + JDK-8264816: Weak handles leak causes GC to take longer
    + JDK-8265832: runtime/StackGap/testme.sh fails to compile in 8u
    + JDK-8265988: Fix sun/text/IntHashtable/Bug4170614 for JDK 8u
    + JDK-8266191: Missing aarch64 parts of JDK-8181872 (C1:
    possible overflow when strength reducing integer multiply by
    constant)
  * Import of OpenJDK 8 u302 build 02
    + JDK-8129511: PlatformMidi.c:83 uses malloc without malloc
    header
  * Import of OpenJDK 8 u302 build 03
    + JDK-8019470: Changes needed to compile JDK 8 on MacOS with
    clang compiler
    + JDK-8138820: JDK Hotspot build fails with Xcode 7.0.1
    + JDK-8241829: Cleanup the code for PrinterJob on windows
    + JDK-8252883: AccessDeniedException caused by delayed file
    deletion on Windows
    + JDK-8256818: SSLSocket that is never bound or connected leaks
    socket resources
    + JDK-8257670: sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java reports leaks
    + JDK-8257884: Re-enable sun/security/ssl/SSLSocketImpl/
    /SSLSocketLeak.java as automatic test
    + JDK-8257997: sun/security/ssl/SSLSocketImpl/SSLSocketLeak.java
    again reports leaks after JDK-8257884
    + JDK-8264640: CMS ParScanClosure misses a barrier
  * Import of OpenJDK 8 u302 build 04
    + JDK-8032050: Clean up for java/rmi/activation/Activatable/
    /shutdownGracefully/ShutdownGracefully.java
    + JDK-8043264: hsdis library not picked up correctly on
    expected paths
    + JDK-8130430: [TEST_BUG] remove unnecessary internal calls
    from javax/swing/JRadioButton/8075609/bug8075609.java
    + JDK-8206243: java -XshowSettings fails if
    memory.limit_in_bytes overflows LONG.max
    + JDK-8206925: Support the certificate_authorities extension
    + JDK-8228757: Fail fast if the handshake type is unknown
    + JDK-8242565: Policy initialization issues when the denyAfter
    constraint is enabled
    + JDK-8253375: OSX build fails with Xcode 12.0 (12A7209)
    + JDK-8257039: [8u] GenericTaskQueue destructor is incorrect
    + JDK-8262446: DragAndDrop hangs on Windows
    + JDK-8265666: Enable AIX build platform to make external debug
    symbols
  * Import of OpenJDK 8 u302 build 05
    + JDK-6990210: [TEST_BUG] EventDispatchThread/
    /HandleExceptionOnEDT/HandleExceptionOnEDT.java fails on gnome
    + JDK-7106851: Test should not use System.exit
    + JDK-8028618: [TEST BUG] javax/swing/JScrollBar/bug4202954/
    /bug4202954.java fails
    + JDK-8035000: clean up ActivationLibrary.DestroyThread
    + JDK-8037825: Fix warnings and enable "warnings as errors" in
    serviceability native libraries
    + JDK-8043646: libosxapp.dylib fails to build on Mac OS 10.9
    with clang
    + JDK-8047939: [TESTBUG] Rewrite
    test/runtime/8001071/Test8001071.sh
    + JDK-8074835: Resolve disabled warnings for libj2gss
    + JDK-8074836: Resolve disabled warnings for libosxkrb5
    + JDK-8078855: [TEST_BUG] javax/swing/JComboBox/8032878/
    /bug8032878.java fails in WindowsClassicLookAndFeel
    + JDK-8081764: [TEST_BUG] Test javax/swing/plaf/aqua/
    /CustomComboBoxFocusTest.java fails on Windows, Solaris
    Sparcv9 and Linux but passes on MacOSX
    + JDK-8172188: JDI tests fail due to "permission denied" when
    creating temp file
    + JDK-8196092: javax/swing/JComboBox/8032878/bug8032878.java
    fails
    + JDK-8202299: Java Keystore fails to load PKCS12/PFX
    certificates created in WindowsServer2016
    + JDK-8239053: [8u] clean up undefined-var-template warnings
    + JDK-8239400: [8u] clean up undefined-var-template warnings
    + JDK-8249142: java/awt/FontClass/CreateFont/DeleteFont.sh is
    unstable
    + JDK-8250876: Fix issues with cross-compile on macos
    + JDK-8254631: Better support ALPN byte wire values in SunJSSE
    + JDK-8265462: Handle multiple slots in the NSS Internal Module
    from SunPKCS11's Secmod
    + JDK-8266723: JFR periodic events are causing extra allocations
    + JDK-8266929: Unable to use algorithms from 3p providers
    + JDK-8267235: [macos_aarch64]
    InterpreterRuntime::throw_pending_exception messing up LR
    results in crash
    + JDK-8267426: MonitorVmStartTerminate test timed out on
    Embedded VM
    + JDK-8267689: [aarch64] Crash due to bad shift in indirect
    addressing mode
  * Import of OpenJDK 8 u302 build 06
    + JDK-8267545: [8u] Enable Xcode 12 builds on macOS
    + JDK-8268444: keytool -v -list print is incorrect after
    backport JDK-8141457
  * Import of OpenJDK 8 u302 build 07
    + JDK-8269388: Default build of OpenJDK 8 fails on newer GCCs
    with warnings as errors on format-overflow
    + JDK-8269468: JDK-8269388 breaks the build on older GCCs
  * Import of OpenJDK 8 u302 build 08
    + JDK-8270533: AArch64: size_fits_all_mem_uses should return
    false if its output is a CAS
  * Shenandoah
    + [backport] 8259580: Shenandoah: uninitialized label in
    VerifyThreadGCState
    + [backport] 8259954: gc/shenandoah/mxbeans tests fail with
  - Xcomp
    + [backport] 8261251: Shenandoah: Use object size for full GC
    humongous
    + [backport] 8261413: Shenandoah: Disable class-unloading in
    I-U mode
    + [backport] 8265239: Shenandoah: Shenandoah heap region count
    could be off by 1
    + [backport] 8266802: Shenandoah: Round up region size to page
    size unconditionally
    + [backport] 8267561: Shenandoah: Reference processing not
    properly setup for outside of cycle degenerated GC
    + [backport] 8268127: Shenandoah: Heap size may be too small
    for region to align to large page size
    + [backport] 8268699: Shenandoah: Add test for JDK-8268127
    + Shenandoah: Process weak roots during class unloading cycle</changelog>
  <changelog author="schwab@suse.de" date="1628078400">- riscv64-zero.patch: Add support for riscv54 (zero VM)</changelog>
  <changelog author="fstrba@suse.com" date="1633953600">- Added patches:
  * comment-nss-security-provider.patch
    + Comment this provider since it is not passing the compliance
    tests
  * fips.patch
    + Implement fips mode</changelog>
  <changelog author="fstrba@suse.com" date="1634126400">- Remove the icedtea-sound backend, since all its functionality is
  in the default java sound backends</changelog>
  <changelog author="fstrba@suse.com" date="1635854400">- Update to version jdk8u312 (icedtea-3.21.0)
  * October 2021 CPU
  * Security fixes
    + JDK-8130183, CVE-2021-35588, bsc#1191905: InnerClasses: VM
    permits wrong Throw ClassFormatError if InnerClasses
    attribute's inner_class_info_index is 0
    + JDK-8161016: Strange behavior of URLConnection with proxy
    + JDK-8163326, CVE-2021-35550, bsc#1191901: Update the default
    enabled cipher suites preference
    + JDK-8254967, CVE-2021-35565, bsc#1191909:
    com.sun.net.HttpsServer spins on TLS session close
    + JDK-8263314: Enhance XML Dsig modes
    + JDK-8265167, CVE-2021-35556, bsc#1191910: Richer Text Editors
    + JDK-8265574: Improve handling of sheets
    + JDK-8265580, CVE-2021-35559, bsc#1191911: Enhanced style for
    RTF kit
    + JDK-8265776: Improve Stream handling for SSL
    + JDK-8266097, CVE-2021-35561, bsc#1191912: Better hashing
    support
    + JDK-8266103: Better specified spec values
    + JDK-8266109: More Resilient Classloading
    + JDK-8266115: More Manifest Jar Loading
    + JDK-8266137, CVE-2021-35564, bsc#1191913: Improve Keystore
    integrity
    + JDK-8266689, CVE-2021-35567, bsc#1191903: More Constrained
    Delegation
    + JDK-8267086: ArrayIndexOutOfBoundsException in
    java.security.KeyFactory.generatePublic
    + JDK-8267712: Better LDAP reference processing
    + JDK-8267729, CVE-2021-35578, bsc#1191904: Improve TLS client
    handshaking
    + JDK-8267735, CVE-2021-35586, bsc#1191914: Better BMP support
    + JDK-8268193: Improve requests of certificates
    + JDK-8268199: Correct certificate requests
    + JDK-8268506: More Manifest Digests
    + JDK-8269618, CVE-2021-35603, bsc#1191906: Better session
    identification
    + JDK-8269624: Enhance method selection support
    + JDK-8270398: Enhance canonicalization
    + JDK-8270404: Better canonicalization
  * Import of OpenJDK 8 u312 build 01
    + JDK-7146776: deadlock between URLStreamHandler.getHostAddress
    and file.Handler.openconnection
    + JDK-8004148: NPE in
    sun.awt.SunToolkit.getWindowDeactivationTime
    + JDK-8027154: [TESTBUG] Test java/awt/Mouse/
    /GetMousePositionTest/GetMousePositionWithPopup.java fails
    + JDK-8035001: TEST_BUG: the retry logic in RMID.start() should
    check that the subprocess hasn't terminated
    + JDK-8035424: (reflect) Performance problem in
    sun.reflect.generics.parser.SignatureParser
    + JDK-8042557: compiler/uncommontrap/
    /TestSpecTrapClassUnloading.java fails with: GC triggered
    before VM initialization completed
    + JDK-8054118: java/net/ipv6tests/UdpTest.java failed
    intermittently
    + JDK-8065215: Print warning summary at end of configure
    + JDK-8072767: DefaultCellEditor for comboBox creates
    ActionEvent with wrong source object
    + JDK-8079891: Store configure log in $BUILD/configure.log
    + JDK-8080082: configure fails if you create an empty directory
    and then run configure from it
    + JDK-8086003: Test fails on OSX with java.lang.RuntimeException
    'Narrow klass base: 0x0000000000000000, Narrow klass shift: 3'
    missing
    + JDK-8134989: java/net/MulticastSocket/TestInterfaces.java
    failed due to unexpected IP address
    + JDK-8156584: Initialization race in
    sun.security.x509.AlgorithmId.get
    + JDK-8166673: The new implementation of Robot.waitForIdle()
    may hang
    + JDK-8170467: (reflect) Optimize SignatureParser's use of
    StringBuilders
    + JDK-8196181: sun/java2d/GdiRendering/InsetClipping.java fails
    + JDK-8202837: PBES2 AlgorithmId encoding error in PKCS12
    KeyStore
    + JDK-8206189: sun/security/pkcs12/EmptyPassword.java fails
    with Sequence tag error
    + JDK-8214418: half-closed SSLEngine status may cause
    application dead loop
    + JDK-8214513: A PKCS12 keystore from Java 8 using custom PBE
    parameters cannot be read in Java 11
    + JDK-8220786: Create new switch to redirect error reporting
    output to stdout or stderr
    + JDK-8229243: SunPKCS11-Solaris provider tests failing on
    Solaris 11.4
    + JDK-8231222: fix pkcs11 P11_DEBUG guarded native traces
    + JDK-8238567: SoftMainMixer.processAudioBuffers(): Wrong
    handling of stoppedMixers
    + JDK-8240518: Incorrect JNU_ReleaseStringPlatformChars in
    Windows Print
    + JDK-8241248: NullPointerException in
    sun.security.ssl.HKDF.extract(HKDF.java:93)
    + JDK-8248901: Signed immediate support in
    .../share/assembler.hpp is broken.
    + JDK-8259338: Add expiry exception for identrustdstx3 alias to
    VerifyCACerts.java test
    + JDK-8262000: jdk/jfr/event/gc/detailed/
    /TestPromotionFailedEventWithParallelScavenge.java failed with
    "OutOfMemoryError: Java heap space"
    + JDK-8262829: Native crash in
    Win32PrintServiceLookup.getAllPrinterNames()
    + JDK-8263311: Watch registry changes for remote printers
    update instead of polling
    + JDK-8265238: [8u] [macos] build failure in OpenJDK8u after
    JDK-8211301 in older xcode
    + JDK-8265978: make test should look for more locations when
    searching for exit code
    + JDK-8269810: [8u] Update generated_configure.sh after
    JDK-8250876 backport
    + JDK-8269953: config.log is not in build directory after 8u
    backport of JDK-8079891
    + JDK-8271466: StackGap test fails on aarch64 due to "-m64"
  * Import of OpenJDK 8 u312 build 02
    + JDK-8247469: getSystemCpuLoad() returns -1 on linux when some
    offline cpus are present and cpusets.effective_cpus is not
    available
    + JDK-8265836: OperatingSystemImpl.getCpuLoad() returns
    incorrect CPU load inside a container
  * Import of OpenJDK 8 u312 build 03
    + JDK-8237495: Java MIDI fails with a dereferenced memory error
    when asked to send a raw 0xF7
    + JDK-8264752: SIGFPE crash with option
    FlightRecorderOptions:threadbuffersize=30M
    + JDK-8266206: Build failure after JDK-8264752 with older GCCs
    + JDK-8270137: Kerberos Credential Retrieval from Cache not
    Working in Cross-Realm Setup
    + JDK-8272214: [8u] Build failure after backport of JDK-8248901
  * Import of OpenJDK 8 u312 build 04
    + JDK-6847157: java.lang.NullPointerException: HDC for
    component at sun.java2d.loops.Blit.Blit
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8194246: JVM crashes when calling getStackTrace if stack
    contains a method that is a member of a very large class
    + JDK-8244154: Update SunPKCS11 provider with PKCS11 v3.0
    header files
    + JDK-8263382: java/util/logging/ParentLoggersTest.java failed
    with "checkLoggers: getLoggerNames() returned unexpected
    loggers"
    + JDK-8268103: JNI functions incorrectly return a double after
    JDK-8265836
    + JDK-8269594: assert(_handle_mark_nesting &gt; 1) failed: memory
    leak: allocating handle outside HandleMark
    + JDK-8269859: BacktraceBuilder._cprefs needs to be accessed as
    unsigned short
    + JDK-8269882: stack-use-after-scope in NewObjectA
  * Import of OpenJDK 8 u312 build 05
    + JDK-7188942: Remove support of pbuffers in OGL Java2d pipeline
    + JDK-8022323: [JavaSecurityScanner] review package
    com.sun.management.* Native methods should be private
    + JDK-8131062: aarch64: add support for GHASH acceleration
    + JDK-8134869: AARCH64: GHASH intrinsic is not optimal
    + JDK-8269851: OperatingSystemMXBean getProcessCpuLoad reports
    incorrect process cpu usage in containers
    + JDK-8272124: Cgroup v1 initialization causes
    NullPointerException when cgroup path contains colon
    + JDK-8272714: [8u] Build failure after backport of JDK-8248901
    with MSVC 2013
  * Import of OpenJDK 8 u312 build 06
    + JDK-8268965: TCP Connection Reset when connecting simple
    socket to SSL server
    + JDK-8272643: Backout JDK-8176837 from 8u312
  * Import of OpenJDK 8 u312 build 07
    + JDK-8157404: Unable to read certain PKCS12 keystores from
    SequenceInputStream
    + JDK-8222751: closed/test/jdk/sun/security/util/
    /DerIndefLenConverter/IndefBerPkcs12.java fail
    + JDK-8269763: The JEditorPane is blank after JDK-8265167
  * Shenandoah
    + [backport] 8269661: JNI_GetStringCritical does not lock char
    array
    + Re-cast JNI critical strings patch to be Shenandoah-specific</changelog>
  <changelog author="fstrba@suse.com" date="1636113600">- Modified patch:
  * fips.patch
    + return in native code after generating java.io.IOException</changelog>
  <changelog author="fstrba@suse.com" date="1638619200">- Modified patch:
  * fips.patch
    + When system crypto policy files are not available, use the
    information from the java.security file that we distribute
    with OpenJDK as a fallback. (bsc#1193314, bsc#1193444,
    bsc#1193491)</changelog>
  <changelog author="fstrba@suse.com" date="1644408000">- Removed patch:
  * comment-nss-security-provider.patch
    + there is a configure-time option to do exactly the same thing
- Modified patch:
  * fips.patch
    + allow plain key import, unless disabled with
  - Dcom.suse.fips.plainKeySupport=false command-line option</changelog>
  <changelog author="fstrba@suse.com" date="1646481600">- Update to version jdk8u322 (icedtea-3.22.0)
  * January 2022 CPU
  * Security fixes
    + JDK-8264934, CVE-2022-21248, bsc#1194926: Enhance cross VM
    serialization
    + JDK-8268488: More valuable DerValues
    + JDK-8268494: Better inlining of inlined interfaces
    + JDK-8268512: More content for ContentInfo
    + JDK-8268795: Enhance digests of Jar files
    + JDK-8268801: Improve PKCS attribute handling
    + JDK-8268813, CVE-2022-21283, bsc#1194937: Better String
    matching
    + JDK-8269151: Better construction of EncryptedPrivateKeyInfo
    + JDK-8269944: Better HTTP transport redux
    + JDK-8270392, CVE-2022-21293, bsc#1194935: Improve String
    constructions
    + JDK-8270416, CVE-2022-21294, bsc#1194934: Enhance
    construction of Identity maps
    + JDK-8270492, CVE-2022-21282, bsc#1194933: Better resolution
    of URIs
    + JDK-8270498, CVE-2022-21296, bsc#1194932: Improve SAX Parser
    configuration management
    + JDK-8270646, CVE-2022-21299, bsc#1194931: Improved scanning
    of XML entities
    + JDK-8271962: Better TrueType font loading
    + JDK-8271968: Better canonical naming
    + JDK-8271987: Manifest improved manifest entries
    + JDK-8272014, CVE-2022-21305, bsc#1194939: Better array
    indexing
    + JDK-8272026, CVE-2022-21340, bsc#1194940: Verify Jar
    Verification
    + JDK-8272236, CVE-2022-21341, bsc#1194941: Improve serial
    forms for transport
    + JDK-8272272: Enhance jcmd communication
    + JDK-8272462: Enhance image handling
    + JDK-8273290: Enhance sound handling
    + JDK-8273748, CVE-2022-21349: Improve Solaris font rendering
    + JDK-8273756, CVE-2022-21360, bsc#1194929: Enhance BMP image
    support
    + JDK-8273838, CVE-2022-21365, bsc#1194928: Enhanced BMP
    processing
  * Import of OpenJDK 8 u322
    + JDK-6801613: Cross-platform pageDialog and printDialog top
    margin entry broken
    + JDK-8011541: [TEST_BUG] closed/javax/swing/plaf/metal/
    /MetalUtils/bug6190373.java fails NPE since 7u25b03
    + JDK-8025430: [TEST_BUG] javax/swing/JEditorPane/5076514/
    /bug5076514.java failed since jdk8b108
    + JDK-8041928: MouseEvent.getModifiersEx gives wrong result
    + JDK-8042199: The build of J2DBench via makefile is broken
    after the JDK-8005402
    + JDK-8044365: (dc) MulticastSendReceiveTests.java failing with
    ENOMEM when joining group (OS X 10.9)
    + JDK-8048021: Remove @version tag in jaxp repo
    + JDK-8049348: compiler/intrinsics/bmi/verifycode tests on
    lzcnt and tzcnt use incorrect assumption about REXB prefix
    usage
    + JDK-8060027: Tests java/beans/XMLEncoder/Test4903007.java and
    java/beans/XMLEncoder/java_awt_GridBagLayout.java
    + JDK-8066588: javax/management/remote/mandatory/connectio
    /RMIConnector_NPETest.java fails to compile
    + JDK-8066652: Default TimeZone is GMT not local if
    user.timezone is invalid on Mac OS
    + JDK-8069034:
    gc/g1/TestEagerReclaimHumongousRegionsClearMarkBits.java
    nightly failure
    + JDK-8077590: windows_i586_6.2-product-c2-runThese8_Xcomp_vm
    failing after win compiler upgrade
    + JDK-8080287: The image of BufferedImage.TYPE_INT_ARGB and
    BufferedImage.TYPE_INT_ARGB_PRE is blank
    + JDK-8140329: [TEST_BUG] test FullScreenAfterSplash.java
    failed because image was not generated
    + JDK-8140472: java/net/ipv6tests/TcpTest.java failed
    intermittently with java.net.BindException: Address already in
    use: NET_Bind
    + JDK-8147051: StaxEntityResolverWrapper should create
    StaxXMLInputSource with a resolver indicator
    + JDK-8148915: Intermittent failures of bug6400879.java
    + JDK-8176837: SunPKCS11 provider needs to check more details
    on PKCS11 Mechanism
    + JDK-8177393: Result of RescaleOp for 4BYTE_ABGR images may be
    25% black
    + JDK-8177536: Avoid Apple Peer-to-Peer interfaces in
    networking tests
    + JDK-8182036: Load from initializing arraycopy uses wrong
    memory state
    + JDK-8183369: RFC unconformity of HttpURLConnection with proxy
    + JDK-8183543: Aarch64: C2 compilation often fails with "failed
    spill-split-recycle sanity check"
    + JDK-8187450: JNI local refs exceeds capacity warning in
    NetworkInterface::getAll
    + JDK-8187649: ArrayIndexOutOfBoundsException in
    java.util.JapaneseImperialCalendar
    + JDK-8190482: InnocuousThread creation should not require the
    caller to possess enableContextClassLoaderOverride
    + JDK-8190793: Httpserver does not detect truncated request body
    + JDK-8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + JDK-8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + JDK-8210058: Algorithmic Italic font leans opposite angle in
    Printing
    + JDK-8220150: macos10.14 Mojave returns anti-aliased glyphs
    instead of aliased B&amp;W glyphs
    + JDK-8225082: Remove IdenTrust certificate that is expiring in
    September 2021
    + JDK-8225083: Remove Google certificate that is expiring in
    December 2021
    + JDK-8226806: [macOS 10.14] Methods of Java Robot should be
    called from appropriate thread
    + JDK-8231254: (fs) Add test for macOS Catalina changes to
    protect system software
    + JDK-8231438: [macOS] Dark mode for the desktop is not
    supported
    + JDK-8232178: MacVolumesTest failed after upgrade to MacOS
    Catalina
    + JDK-8232226: [macos 10.15] test/jdk/java/awt/color/
    /EqualityTest/EqualityTest.java may fail
    + JDK-8235153: [TESTBUG] [macos 10.15] java/awt/Graphics/
    /DrawImageBG/SystemBgColorTest.java fails
    + JDK-8236897: Fix the copyright header for pkcs11gcm2.h
    + JDK-8237499: JFR: Include stack trace in the ThreadStart event
    + JDK-8239886: Minimal VM build fails after JDK-8237499
    + JDK-8261397: Try Catch Method Failing to Work When Dividing
    An Integer By 0
    + JDK-8262731: [macOS] Exception from "Printable.print" is
    swallowed during "PrinterJob.print"
    + JDK-8272342: [TEST_BUG] java/awt/print/PrinterJob/
    /PageDialogMarginTest.java catches all exceptions
    + JDK-8273308: PatternMatchTest.java fails on CI
    + JDK-8273342: Null pointer dereference in
    classFileParser.cpp:2817
    + JDK-8273826: Correct Manifest file name and NPE checks
    + JDK-8273968: JCK javax_xml tests fail in CI
    + JDK-8274407: (tz) Update Timezone Data to 2021c
    + JDK-8274467: TestZoneInfo310.java fails with tzdata2021b
    + JDK-8274468: TimeZoneTest.java fails with tzdata2021b
    + JDK-8274595: DisableRMIOverHTTPTest failed: connection refused
    + JDK-8274779: HttpURLConnection: HttpClient and HttpsClient
    incorrectly check request method when set to POST
    + JDK-8275766: (tz) Update Timezone Data to 2021e
    + JDK-8275849: TestZoneInfo310.java fails with tzdata2021e
    + JDK-8276536: Update TimeZoneNames files to follow the changes
    made by JDK-8275766
- Added patch:
  * JDK-8076190.patch
    + backport reviewed fix for JDK-8076190 Customizing the
    generation of a PKCS12 keystore (bsc#1195163)</changelog>
  <changelog author="coolo@suse.com" date="1649073600">- Add java-1_8_0-openjdk-autoconf27.patch to accept autoconf 2.71
  as autoconf 2.59 or later</changelog>
  <changelog author="fstrba@suse.com" date="1656590400">- Update to version jdk8u332 (icedtea-3.23.0)
  * April 2022 CPU
  * Security fixes
    + JDK-8269938: Enhance XML processing passes redux
    + JDK-8270504, bsc#1198672, CVE-2022-21426: Better XPath
    expression handling
    + JDK-8272255: Completely handle MIDI files
    + JDK-8272261: Improve JFR recording file processing
    + JDK-8272594: Better record of recordings
    + JDK-8274221: More definite BER encodings
    + JDK-8275151, bsc#1198675, CVE-2022-21443: Improved Object
    Identification
    + JDK-8277227: Better identification of OIDs
    + JDK-8277672, bsc#1198674, CVE-2022-21434: Better invocation
    handler handling
    + JDK-8278008, bsc#1198671, CVE-2022-21476: Improve Santuario
    processing
    + JDK-8278356: Improve file creation
    + JDK-8278449: Improve keychain support
    + JDK-8278805: Enhance BMP image loading
    + JDK-8278972, bsc#1198673, CVE-2022-21496: Improve URL supports
    + JDK-8281388: Change wrapping of EncryptedPrivateKeyInfo
  * Import of OpenJDK 8 u332
    + JDK-8033980: Xerces Update: datatype XMLGregorianCalendarImpl
    and DurationImpl
    + JDK-8035437: Xerces Update: xml/serialize/DOMSerializerImpl
    + JDK-8035577: Xerces Update: impl/xpath/regex/RangeToken.java
    + JDK-8037259: xerces update: xpointer update
    + JDK-8041523: Xerces Update: Serializer improvements from Xalan
    + JDK-8141508: java.lang.invoke.LambdaConversionException:
    Invalid receiver type
    + JDK-8162572: Update License Header for all JAXP sources
    + JDK-8167014: jdeps: Missing message: warn.skipped.entry
    + JDK-8198411: [TEST_BUG] Two java2d tests are unstable in mach5
    + JDK-8202822: Add .git to .hgignore
    + JDK-8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit after
    15 &lt;cont&gt; commands
    + JDK-8209178: Proxied HttpsURLConnection doesn't send BODY
    when retrying POST request
    + JDK-8210283: Support git as an SCM alternative in the build
    + JDK-8218682: [TEST_BUG] DashOffset fails in mach5
    + JDK-8225690: Multiple AttachListener threads can be created
    + JDK-8227738: jvmti/DataDumpRequest/datadumpreq001 failed due
    to "exit code is 134"
    + JDK-8227815: Minimal VM: set_state is not a member of
    AttachListener
    + JDK-8240633: Memory leaks in the implementations of
    FileChooserUI
    + JDK-8241768: git needs .gitattributes
    + JDK-8247766: [aarch64] guarantee(val &lt; (1U &lt;&lt; nbits)) failed:
    Field too big for insn
    + JDK-8253147: The javax/swing/JPopupMenu/7154841/
    /bug7154841.java fail on big screens
    + JDK-8253353: Crash in C2: guarantee(n != NULL) failed: No Node
    + JDK-8266749: AArch64: Backtracing broken on PAC enabled
    systems
    + JDK-8270290: NTLM authentication fails if HEAD request is used
    + JDK-8273229: Update OS detection code to recognize Windows
    Server 2022
    + JDK-8273341: Update Siphash to version 1.0
    + JDK-8273575: memory leak in appendBootClassPath(), paths must
    be deallocated
    + JDK-8274524: SSLSocket.close() hangs if it is called during
    the ssl handshake
    + JDK-8277224: sun.security.pkcs.PKCS9Attributes.toString()
    throws NPE
    + JDK-8277488: Add expiry exception for Digicert
    (geotrustglobalca) expiring in May 2022
    + JDK-8279077: JFR crashes on Linux ppc due to missing crash
    protector in signal handler
    + JDK-8280060: The sun/rmi/server/Activation.java class use
    Thread.dumpStack()
    + JDK-8282300: Throws NamingException instead of
    InvalidNameException after JDK-8278972
    + JDK-8282397: createTempFile method of java.io.File is failing
    when called with suffix of spaces character
    + JDK-8284548: Invalid XPath expression causes
    StringIndexOutOfBoundsException
    + JDK-8284920: Incorrect Token type causes XPath expression to
    return empty result
    + JDK-8284936: Fix Java 7 bootstrap breakage due to use of
    Arrays.stream
  * Backports
    + JDK-8031567: Better model for storing source revision
    information
    + JDK-8170385: JDK-8031567 broke source bundles
    + JDK-8170392: JDK-8031567 broke builds from source bundles
    + JDK-8253424: Add support for running pre-submit testing using
    GitHub Actions
    + JDK-8253865: Pre-submit testing using GitHub Actions does not
    detect failures reliably
    + JDK-8254054: Pre-submit testing using GitHub Actions should
    not use the deprecated set-env command
    + JDK-8254173: Add Zero, Minimal hotspot targets to submit
    workflow
    + JDK-8254175: Build no-pch configuration in debug mode for
    submit checks
    + JDK-8254282: Add Linux x86_32 builds to submit workflow
    + JDK-8255305: Add Linux x86_32 tier1 to submit workflow
    + JDK-8255352: Archive important test outputs in submit workflow
    + JDK-8255373: Submit workflow artifact name is always
    "test-results_.zip"
    + JDK-8255895: Submit workflow artifacts miss hs_errs/replays
    due to ZIP include mismatch
    + JDK-8256127: Add cross-compiled foreign architectures builds
    to submit workflow
    + JDK-8256277: Github Action build on macOS should define OS
    and Xcode versions
    + JDK-8256354: Github Action build on Windows should define OS
    and MSVC versions
    + JDK-8256393: Github Actions build on Linux should define OS
    and GCC versions
    + JDK-8256414: add optimized build to submit workflow
    + JDK-8256747: GitHub Actions: decouple the hotspot build-only
    jobs from Linux x64 testing
    + JDK-8257056: Submit workflow should apt-get update to avoid
    package installation errors
    + JDK-8259924: GitHub actions fail on Linux x86_32 with "Could
    not configure libc6:i386"
    + JDK-8260460: GitHub actions still fail on Linux x86_32 with
    "Could not configure libc6:i386"
    + JDK-8263667: Avoid running GitHub actions on branches named
    pr/*
    + JDK-8282225: GHA: Allow one concurrent run per PR only
    + JDK-8284772: 8u GHA: Use GCC Major Version Dependencies Only
  * Bug fixes
    + GH002: Only add -Wno-unused-parameter on gcc and clang
    compilers.
    + GH004: Fix naming of sockaddr_in6 variable (sa6-&gt;him6) in
    SOCKETADDRESS union on Windows
    + GH007: Fix NetworkInterface_winXP.c variable declarations to
    compile on VS2010
    + GH008: Reinstate POST_STRIP_CMD empty check in Images.gmk
    + GH012: Building from tarball broken by bad backport of
    JDK-8210283
  * Shenandoah
    + JDK-8260632: Build failures after JDK-8253353</changelog>
  <changelog author="fstrba@suse.com" date="1659441600">- Update to version jdk8u345 (icedtea-3.24.0)
  * July 2022 CPU
  * Security fixes
    + JDK-8272243: Improve DER parsing
    + JDK-8272249: Better properties of loaded Properties
    + JDK-8277608: Address IP Addressing
    + JDK-8281859, CVE-2022-21540, bsc#1201694: Improve class
    compilation
    + JDK-8281866, CVE-2022-21541, bsc#1201692: Enhance
    MethodHandle invocations
    + JDK-8283190: Improve MIDI processing
    + JDK-8284370: Improve zlib usage
    + JDK-8285407, CVE-2022-34169, bsc#1201684: Improve Xalan
    supports
  * Import of OpenJDK 8 u342
    + JDK-8076190, bsc#1195163: Customizing the generation of a
    PKCS12 keystore
    + JDK-8129572: Cleanup usage of getResourceAsStream in jaxp
    + JDK-8132256: jaxp: Investigate removal of com/sun/org/apache/
    /bcel/internal/util/ClassPath.java
    + JDK-8168926: C2: Bytecode escape analyzer crashes due to
    stack overflow
    + JDK-8170530: bash configure output contains a typo in a
    suggested library name
    + JDK-8190753: (zipfs): Accessing a large entry (&gt; 2^31 bytes)
    leads to a negative initial size for ByteArrayOutputStream
    + JDK-8194154: System property user.dir should not be changed
    + JDK-8202142: jfr/event/io/TestInstrumentation is unstable
    + JDK-8209771: jdk.test.lib.Utils::runAndCheckException error
    + JDK-8221988: add possibility to build with Visual Studio 2019
    + JDK-8223396: [TESTBUG] several jfr tests do not clean up
    files created in /tmp
    + JDK-8230865: [TESTBUG] jdk/jfr/event/io/EvilInstrument.java
    fails at-run shell MakeJAR.sh target
    + JDK-8235211: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails with
    AttachNotSupportedException: Unable to open socket file
    + JDK-8244973: serviceability/attach/
    /RemovingUnixDomainSocketTest.java fails "stderr was not
    empty"
    + JDK-8248876: LoadObject with bad base address created for
    exec file on linux
    + JDK-8255239: The timezone of the hs_err_pid log file is
    corrupted in Japanese locale
    + JDK-8261107: ArrayIndexOutOfBoundsException in the
    ICC_Profile.getInstance(InputStream)
    + JDK-8266187: Memory leak in appendBootClassPath()
    + JDK-8274658: ISO 4217 Amendment 170 Update
    + JDK-8274751: Drag And Drop hangs on Windows
    + JDK-8278138: OpenJDK8 fails to start on Windows 8.1 after
    upgrading compiler to VS2017
    + JDK-8279669: test/jdk/com/sun/jdi/TestScaffold.java uses
    wrong condition
    + JDK-8281814: Debuginfo.diz contains redundant build path
    after backport JDK-8025936
    + JDK-8282458: Update .jcheck/conf file for 8u move to git
    + JDK-8282552: Bump update version of OpenJDK: 8u342
    + JDK-8283350: (tz) Update Timezone Data to 2022a
    + JDK-8284620: CodeBuffer may leak _overflow_arena
    + JDK-8285445: cannot open file "NUL:"
    + JDK-8285523: Improve test java/io/FileOutputStream/
    /OpenNUL.java
    + JDK-8285591: [11] add signum checks in DSA.java engineVerify
    + JDK-8285727: [11u, 17u] Unify fix for JDK-8284920 with
    version from head
    + JDK-8286989: Build failure on macOS after 8281814
    + JDK-8287537: 8u JDK-8284620 backport broke AArch64 build
  * Import of OpenJDK 8 u345
    + JDK-8290832: It is no longer possible to change "user.dir"
    in the JDK8
    + JDK-8291568: Bump update version of OpenJDK: 8u345
- Removed patch:
  * JDK-8076190.patch
    + Included by upstream</changelog>
  <changelog author="schwab@suse.de" date="1661342400">- make-jobserver-detection.patch: Fix detection of jobserver support</changelog>
  <changelog author="fstrba@suse.com" date="1669896000">- Update to version jdk8u352 (icedtea-3.25.0)
  * October 2022 CPU
  * CVEs
    + CVE-2022-21619 (bsc#1204473)
    + CVE-2022-21626 (bsc#1204471)
    + CVE-2022-21624 (bsc#1204475)
    + CVE-2022-21628 (bsc#1204472)
  * Security fixes
    + JDK-8282252: Improve BigInteger/Decimal validation
    + JDK-8285662: Better permission resolution
    + JDK-8286511: Improve macro allocation
    + JDK-8286519: Better memory handling
    + JDK-8286526: Improve NTLM support
    + JDK-8286533: Key X509 usages
    + JDK-8286910: Improve JNDI lookups
    + JDK-8286918: Better HttpServer service
    + JDK-8288508: Enhance ECDSA usage
  * Import of OpenJDK 8 u352
    + JDK-7131823: bug in GIFImageReader
    + JDK-7186258: InetAddress$Cache should replace
    currentTimeMillis with nanoTime for more precise and accurate
    + JDK-8028265: Add legacy tz tests to OpenJDK
    + JDK-8039955: [TESTBUG] jdk/lambda/LambdaTranslationTest1 -
    java.lang.AssertionError: expected [d:1234.000000] but found
    [d:1234,000000]
    + JDK-8049228: Improve multithreaded scalability of InetAddress
    cache
    + JDK-8071507: (ref) Clear phantom reference as soft and weak
    references do
    + JDK-8087283: Add support for the XML Signature here() function
    to the JDK XPath implementation
    + JDK-8130895: Test javax/swing/system/6799345/TestShutdown.java
    fails on Solaris11 Sparcv9
    + JDK-8136354: [TEST_BUG] Test
    java/awt/image/RescaleOp/RescaleAlphaTest.java with Bad action
    for script
    + JDK-8139668: Generate README-build.html from markdown
    + JDK-8143847: Remove REF_CLEANER reference category
    + JDK-8147862: Null check too late in
    sun.net.httpserver.ServerImpl
    + JDK-8150669: C1 intrinsic for Class.isPrimitive
    + JDK-8155742: [Windows] robot.keyPress(KeyEvent.VK_ALT_GRAPH)
    throws java.lang.IllegalArgumentException in windows
    + JDK-8173339: AArch64: Fix minimum stack size computations
    + JDK-8173361: various crashes in
    JvmtiExport::post_compiled_method_load
    + JDK-8175797: (ref) Reference::enqueue method should clear the
    reference object before enqueuing
    + JDK-8178832: (ref) jdk.lang.ref.disableClearBeforeEnqueue
    property is ignored
    + JDK-8183107: PKCS11 regression regarding checkKeySize
    + JDK-8193780: (ref) Remove the undocumented
    "jdk.lang.ref.disableClearBeforeEnqueue" system property
    + JDK-8194873: right ALT key hotkeys no longer work in Swing
    components
    + JDK-8201793: (ref) Reference object should not support cloning
    + JDK-8214427: probable bug in logic of
    ConcurrentHashMap.addCount()
    + JDK-8232950: SUNPKCS11 Provider incorrectly check key length
    for PSS Signatures.
    + JDK-8233019: java.lang.Class.isPrimitive() (C1) returns wrong
    result if Klass* is aligned to 32bit
    + JDK-8235218: Minimal VM is broken after JDK-8173361
    + JDK-8235385: Crash on aarch64 JDK due to long offset
    + JDK-8245263: Enable TLSv1.3 by default on JDK 8u for Client
    roles
    + JDK-8254178: Remove .hgignore
    + JDK-8254318: Remove .hgtags
    + JDK-8256722: handle VC++:1927 VS2019 in  abstract_vm_version
    + JDK-8260589: Crash in JfrTraceIdLoadBarrier::load(_jclass*)
    + JDK-8280963: Incorrect PrintFlags formatting on Windows
    + JDK-8282538: PKCS11 tests fail on CentOS Stream 9
    + JDK-8283849: AsyncGetCallTrace may crash JVM on guarantee
    + JDK-8285400: Add '@apiNote' to the APIs defined in
    Java SE 8 MR 3
    + JDK-8285497: Add system property for Java SE specification
    maintenance version
    + JDK-8287132: Retire Runtime.runFinalizersOnExit so that it
    always throws UOE
    + JDK-8287508: The tests added to jdk-8 by 8235385 are to be
    ported to jdk-11
    + JDK-8287521: Bump update version of OpenJDK: 8u352
    + JDK-8288763: Pack200 extraction failure with invalid size
    + JDK-8288865: [aarch64] LDR instructions must use legitimized
    addresses
    + JDK-8290000: Bump macOS GitHub actions to macOS 11
    + JDK-8292579: (tz) Update Timezone Data to 2022c
    + JDK-8292688: Support Security properties in
    security.testlibrary.Proc
  * AArch32 port
    + JDK-8292599: [aarch32] Crash due to missed CPU specific part
    of 8233019</changelog>
  <changelog author="fstrba@suse.com" date="1675771200">- Update to version jdk8u362 (icedtea-3.26.0)
  * January 2023 CPU
  * CVEs
    + CVE-2023-21830, bsc#1207249
    + CVE-2023-21843, bsc#1207248
  * Security fixes
    + JDK-8285021: Improve CORBA communication
    + JDK-8286496: Improve Thread labels
    + JDK-8288516: Enhance font creation
    + JDK-8289350: Better media supports
    + JDK-8293554: Enhanced DH Key Exchanges
    + JDK-8293598: Enhance InetAddress address handling
    + JDK-8293717: Objective view of ObjectView
    + JDK-8293734: Improve BMP image handling
    + JDK-8293742: Better Banking of Sounds
    + JDK-8295687: Better BMP bounds
  * New features
    + Support for building with autoconf 2.71
  * Import of OpenJDK 8 u362 build 09
    + JDK-6885993: Named Thread: introduce print() and
    print_on(outputStream* st) methods
    + JDK-7124218: [TEST_BUG] [macosx] Space should select cell in
    the JTable
    + JDK-8054066: com/sun/jdi/DoubleAgentTest.java fails with
    timeout
    + JDK-8067941: [TESTBUG] Fix tests for OS with 64K page size.
    + JDK-8071530: Update OS detection code to reflect Windows 10
    version change
    + JDK-8073464: GC workers do not have thread names
    + JDK-8079255: [TEST_BUG] [macosx] Test closed/java/awt/Robot/
    /RobotWheelTest/RobotWheelTest fails for Mac only
    + JDK-8129827: [TEST_BUG] Test java/awt/Robot/RobotWheelTest/
    /RobotWheelTest.java fails
    + JDK-8148005: One byte may be corrupted by
    get_datetime_string()
    + JDK-8159599: [TEST_BUG] java/awt/Modal/ModalInternalFrameTest/
    /ModalInternalFrameTest.java
    + JDK-8159720: Failure of C2 compilation with tiered prevents
    some C1 compilations
    + JDK-8197859: VS2017 Complains about UINTPTR_MAX definition in
    globalDefinitions_VisCPP.hpp
    + JDK-8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mems
    + JDK-8221529: [TESTBUG] Docker tests use old/deprecated image
    on AArch64
    + JDK-8224506: [TESTBUG] TestDockerMemoryMetrics.java fails
    with exitValue = 137
    + JDK-8233551: [TESTBUG] SelectEditTableCell.java fails on MacOS
    + JDK-8241086: Test runtime/NMT/HugeArenaTracking.java is
    failing on 32bit Windows
    + JDK-8253702: BigSur version number reported as 10.16, should
    be 11.nn
    + JDK-8255559: Leak File Descriptors Because of
    ResolverLocalFilesystem#engineResolveURI()
    + JDK-8265527: tools/javac/diags/CheckExamples.java fails after
    JDK-8078024 8u backport
    + JDK-8269039: Disable SHA-1 Signed JARs
    + JDK-8269850: Most JDK releases report macOS version 12 as
    10.16 instead of 12.0
    + JDK-8270344: Session resumption errors
    + JDK-8271459: C2: Missing NegativeArraySizeException when
    creating StringBuilder with negative capacity
    + JDK-8273176: handle latest VS2019 in abstract_vm_version
    + JDK-8274563: jfr/event/oldobject/TestClassLoaderLeak.java
    fails when GC cycles are not happening
    + JDK-8274840: Update OS detection code to recognize Windows 11
    + JDK-8275887: jarsigner prints invalid digest/signature
    algorithm warnings if keysize is weak/disabled
    + JDK-8280890: Cannot use '-Djava.system.class.loader' with
    class loader in signed JAR
    + JDK-8283277: ISO 4217 Amendment 171 Update
    + JDK-8283903: GetContainerCpuLoad does not return the correct
    result in share mode
    + JDK-8284389: Improve stability of GHA Pre-submit testing by
    caching cygwin installer
    + JDK-8284622: Update versions of some Github Actions used in
    JDK workflow
    + JDK-8286582: Build fails on macos aarch64 when using
  - -with-zlib=bundled
    + JDK-8288928: Incorrect GPL header in pnglibconf.h (backport
    of JDK-8185041)
    + JDK-8289549: ISO 4217 Amendment 172 Update
    + JDK-8292762: Remove .jcheck directories from jdk8u
    subcomponents
    + JDK-8293181: Bump update version of OpenJDK: 8u362
    + JDK-8293461: Add a test for JDK-8290832
    + JDK-8293828: JFR: jfr/event/oldobject/TestClassLoaderLeak.java
    still fails when GC cycles are not happening
    + JDK-8294307: ISO 4217 Amendment 173 Update
    + JDK-8294357: (tz) Update Timezone Data to 2022d
    + JDK-8294863: Enable partial tier1 testing in GHA for JDK8
    + JDK-8295164: JDK 8 jdi tests should not use tasklist command
    on Windows
    + JDK-8295173: (tz) Update Timezone Data to 2022e
    + JDK-8295288: Some vm_flags tests associate with a wrong BugID
    + JDK-8295714: GHA ::set-output is deprecated and will be
    removed
    + JDK-8295723: security/infra/wycheproof/RunWycheproof.java
    fails with Assertion Error
    + JDK-8295915: Problemlist compiler/rtm failures specific to 8u
    + JDK-8295950: Enable langtools/tier1 in GHA for 8u
    + JDK-8296108: (tz) Update Timezone Data to 2022f
    + JDK-8296239: ISO 4217 Amendment 174 Update
    + JDK-8296555: Enable hotspot/tier1 for 64-bit builds in GHA
    for 8u
    + JDK-8296715: CLDR v42 update for tzdata 2022f
    + JDK-8296959: Fix hotspot shell tests of 8u on multilib systems
    + JDK-8297141: Fix hotspot/test/runtime/SharedArchiveFile/
    /DefaultUseWithClient.java for 8u
    + JDK-8297804: (tz) Update Timezone Data to 2022g
    + JDK-8299439: java/text/Format/NumberFormat/CurrencyFormat.java
    fails for hr_HR
    + JDK-8299483: ProblemList java/text/Format/NumberFormat/
    /CurrencyFormat.java
    + JDK-8300178: JDK-8286496 causes build failure on older GCC
    + JDK-8300225: JDK-8288516 causes build failure on Windows +
    VS2010
  * Bug fixes
    + Don't run check-aes on Zero builds (pointless and slow)
- Removed patch:
  * java-1_8_0-openjdk-autoconf27.patch
    + fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1683115200">- Update to version jdk8u372 (icedtea-3.27.0)
  * April 2023 CPU
  * CVEs
    + CVE-2023-21930, bsc#1210628
    + CVE-2023-21937, bsc#1210631
    + CVE-2023-21938, bsc#1210632
    + CVE-2023-21939, bsc#1210634
    + CVE-2023-21954, bsc#1210635
    + CVE-2023-21967, bsc#1210636
    + CVE-2023-21968, bsc#1210637
  * Security fixes
    + JDK-8287404: Improve ping times
    + JDK-8288436: Improve Xalan supports
    + JDK-8294474: Better AES support
    + JDK-8295304: Runtime support improvements
    + JDK-8296496, JDK-8292652: Overzealous check in sizecalc.h
    prevents large memory allocation
    + JDK-8296676, JDK-8296622: Improve String platform support
    + JDK-8296684: Improve String platform support
    + JDK-8296692: Improve String platform support
    + JDK-8296700: Improve String platform support
    + JDK-8296832: Improve Swing platform support
    + JDK-8297371: Improve UTF8 representation redux
    + JDK-8298191: Enhance object reclamation process
    + JDK-8298310: Enhance TLS session negotiation
    + JDK-8298667: Improved path handling
    + JDK-8299129: Enhance NameService lookups
  * Import of OpenJDK 8 u372 build 07
    + JDK-6734341: REGTEST fails: SelectionAutoscrollTest.html
    + JDK-6829250: Reg test: java/awt/Toolkit/ScreenInsetsTest/
    /ScreenInsetsTest.java fails in Windows
    + JDK-7001973: java/awt/Graphics2D/CopyAreaOOB.java fails
    + JDK-7124238: [macosx] Font in BasicHTML document is bigger
    than it should be
    + JDK-7124381: DragSourceListener.dragDropEnd() never been
    called on completion of dnd operation
    + JDK-8039888: [TEST_BUG] keyboard garbage after
    javax/swing/plaf/windows/WindowsRootPaneUI/WrongAltProcessing/
    /WrongAltProcessing.java
    + JDK-8042098: [TESTBUG] Test
    sun/java2d/AcceleratedXORModeTest.java fails on Windows
    + JDK-8065422: Trailing dot in hostname causes TLS handshake to
    fail with SNI disabled
    + JDK-8072770: [TESTBUG] Some Introspector tests fail with a
    Java heap bigger than 4GB
    + JDK-8075964: Test java/awt/Mouse/TitleBarDoubleClick/
    /TitleBarDoubleClick.html fails intermittently with timeout
    error
    + JDK-8137101: [TEST_BUG] javax/swing/plaf/basic/BasicHTML/
    /4251579/bug4251579.java failure due to timing
    + JDK-8142540: [TEST_BUG] Test sun/awt/dnd/8024061/
    /bug8024061.java fails on ubuntu
    + JDK-8156579: Two JavaBeans tests failed
    + JDK-8156581: Cleanup of ProblemList.txt
    + JDK-8159135: [PIT] javax/swing/JMenuItem/8152981/
    /MenuItemIconTest.java always fail
    + JDK-8177560: @headful key can be removed from the tests for
    JavaSound
    + JDK-8196196: Headful tests should not be run in headless mode
    + JDK-8196467: javax/swing/JInternalFrame/Test6325652.java fails
    + JDK-8197408: Bad pointer comparison and small cleanup in
    os_linux.cpp
    + JDK-8203485: [freetype] text rotated on 180 degrees is too
    narrow
    + JDK-8205959: Do not restart close if errno is EINTR
    + JDK-8216366: Add rationale to PER_CPU_SHARES define
    + JDK-8226236: win32:
    gc/metaspace/TestCapacityUntilGCWrapAround.java fails
    + JDK-8228585: jdk/internal/platform/cgroup/
    /TestCgroupMetrics.java - NumberFormatException because of
    large long values (memory limit_in_bytes)
    + JDK-8229182: [TESTBUG] runtime/containers/docker/
    /TestMemoryAwareness.java test fails on SLES12
    + JDK-8229202: Docker reporting causes secondary crashes in
    error handling
    + JDK-8230305: Cgroups v2: Container awareness
    + JDK-8231111: Cgroups v2: Rework Metrics in java.base so as to
    recognize unified hierarchy
    + JDK-8232207: Linux os::available_memory re-reads cgroup
    configuration on every invocation
    + JDK-8233570: [TESTBUG] HTMLEditorKit test bug5043626.java is
    failing on macos
    + JDK-8234484: Add ability to configure third port for remote
    JMX
    + JDK-8237479: 8230305 causes slowdebug build failure
    + JDK-8239559: Cgroups: Incorrect detection logic on some
    systems
    + JDK-8239785: Cgroups: Incorrect detection logic on old
    systems in hotspot
    + JDK-8239827: The test OpenByUNCPathNameTest.java should be
    changed to be manual
    + JDK-8240189: [TESTBUG] Some cgroup tests are failing after
    JDK-8231111
    + JDK-8241087: Build failure with VS 2019 (16.5.0) due to C2039
    and C2873
    + JDK-8242468: VS2019 build missing vcruntime140_1.dll
    + JDK-8243543: jtreg test security/infra/java/security/cert/
    /CertPathValidator/certification/BuypassCA.java fails
    + JDK-8244500: jtreg test error in test/hotspot/jtreg/
    /containers/docker/TestMemoryAwareness.java
    + JDK-8245543: Cgroups: Incorrect detection logic on some
    systems (still reproducible)
    + JDK-8245654: Add Certigna Root CA
    + JDK-8247676: vcruntime140_1.dll is not needed on 32-bit
    Windows
    + JDK-8248899: security/infra/java/security/cert/
    /CertPathValidator/certification/QuoVadisCA.java fails,
    Certificate has been revoked
    + JDK-8252359: HotSpot Not Identifying it is Running in a
    Container
    + JDK-8252957: Wrong comment in CgroupV1Subsystem::cpu_quota
    + JDK-8253435: Cgroup: 'stomping of _mount_path' crash if
    manually mounted cpusets exist
    + JDK-8253714: [cgroups v2] Soft memory limit incorrectly using
    memory.high
    + JDK-8253727: [cgroups v2] Memory and swap limits reported
    incorrectly
    + JDK-8253797: [cgroups v2] Account for the fact that swap
    accounting is disabled on some systems
    + JDK-8253939: [TESTBUG] Increase coverage of the cgroups
    detection code
    + JDK-8254001: [Metrics] Enhance parsing of cgroup interface
    files for version detection
    + JDK-8254717: isAssignableFrom checks in
    KeyFactorySpi.engineGetKeySpec appear to be backwards
    + JDK-8254997: Remove unimplemented
    OSContainer::read_memory_limit_in_bytes
    + JDK-8257620: Do not use objc_msgSend_stret to get macOS
    version
    + JDK-8262379: Add regression test for JDK-8257746
    + JDK-8263404: RsaPrivateKeySpec is always recognized as
    RSAPrivateCrtKeySpec in RSAKeyFactory.engineGetKeySpec
    + JDK-8266391: Replace use of reflection in
    jdk.internal.platform.Metrics
    + JDK-8270317: Large Allocation in CipherSuite
    + JDK-8275535: Retrying a failed authentication on multiple
    LDAP servers can lead to users blocked
    + JDK-8275650: Problemlist java/io/File/createTempFile/
    /SpecialTempFile.java for Windows 11
    + JDK-8275713: TestDockerMemoryMetrics test fails on recent runc
    + JDK-8278951: containers/cgroup/PlainRead.java fails on Ubuntu
    21.10
    + JDK-8280048: Missing comma in copyright header
    + JDK-8282398: EndingDotHostname.java test fails because SSL
    cert expired
    + JDK-8282511: Use fixed certificate validation date in
    SSLExampleCert template
    + JDK-8282947: JFR: Dump on shutdown live-locks in some
    conditions
    + JDK-8283606: Tests may fail with zh locale on MacOS
    + JDK-8284102: [TESTBUG] [11u] Retroactively add regression
    test for JDK-8272124
    + JDK-8284690: [macos] VoiceOver : Getting
    java.lang.IllegalArgumentException: Invalid location on
    Editable JComboBox
    + JDK-8284756: [11u] Remove unused isUseContainerSupport in
    CgroupV1Subsystem
    + JDK-8284977: MetricsTesterCgroupV2.getLongValueEntryFromFile
    fails when named value doesn't exist
    + JDK-8286624: Regression Test CoordinateTruncationBug.java
    fails on OL8.3
    + JDK-8287107: CgroupSubsystemFactory.setCgroupV2Path asserts
    with freezer controller
    + JDK-8287109: Distrust.java failed with
    CertificateExpiredException
    + JDK-8287463: JFR: Disable TestDevNull.java on Windows
    + JDK-8287741: Fix of JDK-8287107 (unused cgv1 freezer
    controller) was incomplete
    + JDK-8289695: [TESTBUG] TestMemoryAwareness.java fails on
    cgroups v2 and crun
    + JDK-8291570: [TESTBUG] Part of JDK-8250984 absent from 11u
    + JDK-8292083: Detected container memory limit may exceed
    physical machine memory
    + JDK-8292541: [Metrics] Reported memory limit may exceed
    physical machine memory
    + JDK-8293472: Incorrect container resource limit detection if
    manual cgroup fs mounts present
    + JDK-8293540: [Metrics] Incorrectly detected resource limits
    with additional cgroup fs mounts
    + JDK-8293767: AWT test TestSinhalaChar.java has old SCCS
    markings
    + JDK-8294767: 8u contains two copies of
    test/../FileUtils.java, one uses JDK9+ features
    + JDK-8295322: Tests for JDK-8271459 were not backported to 11u
    + JDK-8295952: Problemlist existing compiler/rtm tests also on
    x86
    + JDK-8295982: Failure in sun/security/tools/keytool/
    /WeakAlg.java - ks: The process cannot access the file because
    it is being used by another process
    + JDK-8296480: java/security/cert/pkix/policyChanges/
    /TestPolicy.java is failing
    + JDK-8296485: BuildEEBasicConstraints.java test fails with
    SunCertPathBuilderException
    + JDK-8296632: Write a test to verify the content change of
    TextArea sends TextEvent
    + JDK-8296957: One more cast in SAFE_SIZE_NEW_ARRAY2
    + JDK-8297329: [8u] hotspot needs to recognise VS2019
    + JDK-8297739: Bump update version of OpenJDK: 8u372
    + JDK-8297996: [8u] generated images are broken due to renaming
    of MSVC runtime DLL's
    + JDK-8298027: Remove SCCS id's from awt jtreg tests
    + JDK-8298307: Enable hotspot/tier1 for 32-bit builds in GHA
    for 8u
    + JDK-8299445: EndingDotHostname.java fails because of
    compilation errors
    + JDK-8299548: Fix hotspot/test/runtime/Metaspace/
    /MaxMetaspaceSizeTest.java in 8u
    + JDK-8299804: Fix non-portable code in hotspot shell tests in
    8u
    + JDK-8300014: Some backports placed the tests in the wrong
    location
    + JDK-8300119: CgroupMetrics.getTotalMemorySize0() can report
    invalid results on 32 bit systems
    + JDK-8301122: [8u] Fix unreliable vs2010 download link
    + JDK-8301143: [TESTBUG] jfr/event/sampling/TestNative was
    backported to JDK8u without proper native wrapper
    + JDK-8301246: NPE in FcFontManager.getDefaultPlatformFont() on
    Linux without installed fontconfig
    + JDK-8301332: [8u] Fix writing of test files after the cgroups
    v2 backport
    + JDK-8301550: [8u] Enable additional linux build testing in
    GitHub
    + JDK-8301620: [8u] some shell tests are passed but have
    unexpected operator errors
    + JDK-8301760: Fix possible leak in SpNegoContext dispose
    + JDK-8303408: [AIX] Broken jdk8u build after JDK-8266391
    + JDK-8303828: [Solaris] Broken jdk8u build after JDK-8266391
    + JDK-8304053: Revert os specific stubs for SystemMetrics
    + JDK-8305113: (tz) Update Timezone Data to 2023c</changelog>
</package>
<package pkgid="8b2f68f8afe39e183e821b33a2bd29d0281c29bc9713d0b21fc301b1be302c1a" name="javapackages-filesystem" arch="aarch64">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="802638361b20de886c7e62246eb0ffae69701fc09be23eabac271279e610c4bc" name="javapackages-filesystem" arch="ppc64le">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="35e87747a2998d174df8254656a3b35dd8dc73038843af9fe358a622ae5c9611" name="javapackages-filesystem" arch="s390x">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="59e80f04c6eb210cc8f9a243555f3035e803aba3f82825fde619f39cb5fb5827" name="javapackages-filesystem" arch="x86_64">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="52c94e299742edda09cb96e885edd71d43bc453b5ef03831adb893a00d052914" name="javapackages-gradle" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="f8cebff2c91bfae9cdd7f841b43e91fbbf3016ebdefa634cd6b26f5e811364ca" name="javapackages-ivy" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="bed7752b1acda83a4fd23022699f5fbf28a4a83eccd3382cdcc4c7099916347f" name="javapackages-local" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="5f0ef3d1ab1ae1bc0d758bd5db955a5595ce55990948f406f338d8103de26764" name="javapackages-tools" arch="aarch64">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="8cf471b2aebb1679fb12d3d48e84600128ba0228532a1c5a9f34537828df011e" name="javapackages-tools" arch="ppc64le">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="c95badda484847e93d61b1b6c841242df814e3de2297b59bd003d0536bccc744" name="javapackages-tools" arch="s390x">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="2bbec243a77f431554723858a97287a5f245fa0994d7eb646ab83516471d7f26" name="javapackages-tools" arch="src">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="7978b81527d6f323707cf0ed08b35df07ef6fac5168371992b4249c6e24f31fb" name="javapackages-tools" arch="x86_64">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="7e00dfea88e4331e8748316a92f47a19d46edc9a357885dd2987565b06dac159" name="javapackages-tools-extras" arch="src">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="7ab5b920ab44ba63b17c63fb3e98f09bdf8930d672ec298deef21ab725a87b24" name="javaparser" arch="noarch">
  <version epoch="0" ver="3.25.1" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of javaparser 3.3.5</changelog>
  <changelog author="fstrba@suse.com" date="1646913600">- Upgrade to the latest version 3.24.0
  * A long list of fixes is to be found at https://github.com/
    /javaparser/javaparser/blob/master/changelog.md
  * Upgrade needed to be able to upgrade jctools and make them
    not depend hard on Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Upgrade to upstream version 3.24.2
  * Fixes:
    + Adding constructor descriptor
    + Fix issue #3491  Method has a multidimensional arrays argument
    in jar file. when call the method throw
    UnsolvedSymbolException
    + Fix issue #3218 GetSourceRoots() does not return all source
    roots
    + Bug in ArrayCreationExpr constructors
    + Fix issue 3440 Removing a node with LexicalPreservingPrinter
    causes UnsupportedOperationException
    + Improve unit test for BlockStmtContextResolutionTest
    + Improve Conditional Operator resolution [JLS 15.25]
    + Fix issue #3526 Variable or FieldDeclaration is not resolved
    correctly when another variable with the same name is
    declared in the same block</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1669550400">- Upgrade to upstream version 3.24.8
  * Added
    + [Fixes #3099] Added ability to solve type with a list of
    expected type arguments
    + [Suggestion] NonNull generator for parameters
  * Changed
    + Updated workflow to only run one job per PR
    + Remove or comment system.out.println statement in unit tests
    + Added Optional method in SymbolReference
    + Centralized management of symbol solver exceptions to prevent
    exception type Erasion
  * Fixed
    + Fix issue #1827 Issue resolving a constructor of a class
    using generics
    + Fix issue #3728 ParseProblemException
    + Updated Badge for Build and Coverage
    + Position
    + Fix part of issue #3721 UnsupportedOperationException while
    trying to modify the type of a variable
    + Implemented isReferenceType in ResolvedTypeDeclaration and
    isTypeParameter in ResolvedTypeParameterDeclaration
  * Developer Changes
    + chore(deps): bump versions-maven-plugin from 2.12.0 to 2.13.0
    + Fix maven wrapper not found in generator scripts
    + chore(deps): bump actions/checkout from 3.0.2 to 3.1.0
  * Uncategorised
    + Change issue 1945 test to paramaterized
    + More unit tests for JavaToken and CodeGenerationUtils
- Upgrade to upstream version 3.24.7
  * Highlights
    + Issue #3415
  * Changed
    + Refactoring - use of existing methods
    + Refactoring adding convenient methods to know if a
    DifferenceElement is added, removed or kept
  * Deprecated
    + Issue #3415
  * Fixed
    + Fix for ReflectionAnnotationDeclaration getClassName()
    + Fix some yield expressions not recognized
    + Accept final in instanceof pattern
    + [Fix] Avoid test failure due to line separator differences on
    windows host
    + Fix issue #3700 Removing last statement with
    LexicalPreservingPrinter results in loss of indendation
    + Fix issue #3678 Function accepts a configuration but it does
    not do anything
- Upgrade to upstream version 3.24.3
  * API or Behaviour Change
    + Issue #3405 thread safety of pre/postprocessors (incl.
    breaking change to Processor with pre/post processor
    methods).
  * Changed
    + Minor refactoring to manage check in range and use hasRange
    method in class CommentsInserter
    + Renaming PACKAGE_PRIVATE to NONE (this refers to the
    discussion in the issue #2242)
  * Fixed
    + Fix documentation of JAVA_17
    + Fix issue 3631 NameExpr.resolve() does not take end of inner
    block scopes into account
    + Fix issue #3588 Modifier is removed when removing an
    annotation
    + Fix lambda generic types that are always resolved to the
    first type param
    + Fix issue #3489 SourceRoot.tryToParse() fails if the root
    path ends with a directory that is not a java identifier
    + Default pretty printer should print inner-class receiver
    parameters on constructors
    + Issue #3405 thread safety of pre/postprocessors (incl.
    breaking change to Processor with pre/post processor
    methods).
  * Developer Changes
    + chore(deps): update actions/checkout action to v3.0.1
    + official Apache Maven wrapper
    + chore(deps): update codecov/codecov-action action to v3
    + chore(deps): update dependency org.jacoco:jacoco-maven-plugin
    to v0.8.8
    + chore(deps): update dependency
    org.apache.maven.plugins:maven-clean-plugin to v3.2.0
    + chore(deps): update dependency
    org.apache.maven.plugins:maven-surefire-plugin to v3.0.0-m6
- Re-enable modules:
  javaparser-symbol-solver-{core,logic,model,testing}
- Add build dependency on mvn(org.javassist:javassist)
- Update summary and description</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1670846400">- Upgrade to upstream version 3.24.9
  * Highlights
    + Remove "executable" bit from code files (PR #3755 by @icmdaf)
  * Added
    + Created TypeSolverBuilder (PR #3421 by @4everTheOne)
  * Changed
    + Changing, in test classes, the initialization of the lexical
    preserva… (PR #3779 by @jlerbsc)
    + chore(deps): bump maven-dependency-plugin from 3.3.0 to 3.4.0
    (PR #3770 by @dependabot[bot])
    + chore(deps): bump maven-install-plugin from 3.0.1 to 3.1.0
    (PR #3756 by @dependabot[bot])
  * Fixed
    + Fix: #3195 Resolved methods in outer classes not inferred
    correcly (PR #3778 by @jlerbsc)
    + Fix: #3681 LineComment alwaysing trimming content (PR #3777
    by @jlerbsc)
    + Fix: #3773 Replacing nodes causes error in lexical preserving
    printer… (PR #3776 by @jlerbsc)
    + Fix: #2517 Modifying some nodes with the lexicalPreservation
    enabled … (PR #3775 by @jlerbsc)
    + Fix: #3725 JavaParserFacade var type in for-each loop cannot
    be resolved (PR #3768 by @abego)
    + Fix: #3216 LexicalPreservingPrinter add Wrong indentation
    when removing comments (PR #3766 by @jlerbsc)
    + Fix: #3472 Line comment removal causes IllegalStateException
    with LexicalPreservingPrinter (PR #3765 by @jlerbsc)
    + Fix: #3441 LexicalPreservingPrinter prints wrong output with
    line com… (PR #3764 by @jlerbsc)
    + Fix: #2137 ClassOrInterfaceDeclaration addMember using index
    (PR #3763 by @jlerbsc)
    + Fix: #3761 Lexical preserving corrupts source when adding a
    modifier in first position (PR #3762 by @jlerbsc)
    + Fix: #3693 Removing modifiers from method declaration results
    in loss… (PR #3760 by @jlerbsc)
    + Fix: #3750 Lexical preserving corrupts source (PR #3759 by
    @jlerbsc)
    + Fix: Fix the indentation generated by the
    LexicalPreservingPrinter wh… (PR #3758 by @jlerbsc)
  * Security
    + Remove "executable" bit from code files (PR #3755 by @icmdaf)
- Add build dependency on mvn(org.checkerframework:checker-qual)</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674907200">- Upgrade to upstream version 3.24.10
  * Added
    + Add a method in LexicalPreservingPrinter to know if LPP is
    available/activated on the specified node (PR #3823 by
    @jlerbsc)
    + Handle nested records (PR #3814 by @mernst)
    + Source printer import ordering strategy (PR #3807 by
    @4everTheOne)
  * Changed
    + chore(deps): bump versions-maven-plugin from 2.14.1 to 2.14.2
    (PR #3817 by @dependabot[bot])
    + Enabled import validation (PR #3812 by @4everTheOne)
    + Part 5 | Import organization (PR #3805 by @4everTheOne)
    + Part 4 | Import organization (PR #3804 by @4everTheOne)
    + Part 3 | Import organization (PR #3803 by @4everTheOne)
    + Part 2 | Import organization (PR #3802 by @4everTheOne)
    + Part 1 | Import organization (PR #3801 by @4everTheOne)
    + Checkstyle configuration tweaks (PR #3799 by @4everTheOne)
    + chore(deps): bump versions-maven-plugin from 2.13.0 to 2.14.1
    (PR #3797 by @dependabot[bot])
    + chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 (PR
    [#3789] by @dependabot[bot])
    + chore(deps): bump checkstyle from 8.45.1 to 10.5.0 (PR #3788
    by @dependabot[bot])
  * Fixed
    + explicit use asString for performance (PR #3821 by @dencat)
    + Fix: issue #3818 Wrong range calculation on ArrayType with
    multiple d… (PR #3820 by @jlerbsc)
    + Fix: Lexical Preserving Fails To Remove Comment (PR #3810 by
    @jlerbsc)
  * Developer Changes
    + chore(deps): bump versions-maven-plugin from 2.13.0 to 2.14.0
    (PR #3794 by @dependabot[bot])
    + Basic CheckStyle validation (PR #3781 by @4everTheOne)
  * Uncategorised
    + Fix: 3412 Remove walkmod again (PR #3806 by @jlerbsc)</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1678276800">- Upgrade to upstream version 3.25.1
  * API or Behaviour Change
    + Fix: Issue 3045 Unexpected exception when solving type inside
    an Anonymous class (PR #3896 by @jlerbsc)
  * Added
    + Improved search for functional interfaces (PR #3894 by
    @jlerbsc)
  * Changed
    + chore(deps): bump maven-compiler-plugin from 3.10.1 to 3.11.0
    (PR #3928 by @dependabot[bot])
    + chore(deps): bump checkstyle from 10.7.0 to 10.8.0 (PR #3927
    by @dependabot[bot])
    + chore(deps): bump versions-maven-plugin from 2.14.2 to 2.15.0
    (PR #3914 by @dependabot[bot])
    + chore(deps): bump maven-javadoc-plugin from 3.4.1 to 3.5.0
    (PR #3906 by @dependabot[bot])
    + Refactor: cleanup/refactor code after fixing #3859 (PR #3886
    by @abego)
  * Fixed
    + Fix: issue 3924 Removing ImportDeclaration with Annotated
    package thr… (PR #3926 by @jlerbsc)
    + Fix: issue 3918 JavaParserTypeDeclarationAdapter resolving
    wrong Type via Ancestor (PR #3921 by @jlerbsc)
    + Fix: issue 3919 ResolvedType::isAssignableBy(ResolvedType) is
    wrong f… (PR #3920 by @jlerbsc)
    + Fix: issue 3911 java.lang.UnsupportedOperationException: T[]
    while resolving generic method with type parameter with
    arrays like List&lt;T[]&gt; (PR #3917 by @jlerbsc)
    + Fix: \s escape gives lexical error but should be valid since
    Java 15 (PR #3903 by @jlerbsc)
    + Fix: Issue 3045 Unexpected exception when solving type inside
    an Anonymous class (PR #3896 by @jlerbsc)
    + Fix issue 1883 Finding lambda return type (PR #3890 by
    @jlerbsc)
    + Fix: issue 1815 ArrayIndexOutOfBoundsException when resolving
    lambda parameter. This fix is offered by Blackgen (PR #3888
    by @jlerbsc)
  * Developer Changes
    + chore(deps): bump checkstyle from 10.6.0 to 10.7.0 (PR #3885
    by @dependabot[bot])
- Upgrade to upstream version 3.25.0
  * Added
    + First part of the implementation of least upper bound logic
    (PR #3880 by @jlerbsc)
    + feat: Improved support for calculating the type of an object
    creation… (PR #3877 by @jlerbsc)
    + feat: Implement addRecord &amp; getRecordByName for
    CompilationUnit (PR #3836 by @marcluque)
    + Support Jigsaw requires static (PR #3826 by @jlerbsc)
    + Add toDescriptor to ResolvedMethodDeclaration (PR #3819 by
    @vanHekthor)
    + Refactoring context (WIP) (PR #3792 by @jlerbsc)
    + Refactoring context (WIP) (PR #3782 by @jlerbsc)
    + Refactoring convert to usage (PR #3774 by @jlerbsc)
    + Simplified usage of class AssociableToAST (PR #3063 by
    @4everTheOne)
  * Changed
    + Revert import related checkstyle rule from error to warning
    (PR #3881 by @jlerbsc)
    + Minor refactoring for example to get all parameter types (PR
    [#3879] by @jlerbsc)
    + Add header and footer methods in comments instead of using
    literal st… (PR #3876 by @jlerbsc)
    + In the context of lexical preservation, the CSM token must be
    added m… (PR #3874 by @jlerbsc)
    + Refactoring: remove useless code that is already implemented
    (PR #3869 by @jlerbsc)
    + Memory usage improvement when printing a node from the
    LexicalPreserv… (PR #3858 by @jlerbsc)
    + chore(deps-dev): bump assertj-core from 3.24.1 to 3.24.2 (PR
    [#3852] by @dependabot[bot])
    + chore(deps): bump maven-checkstyle-plugin from 3.2.0 to 3.2.1
    (PR #3846 by @dependabot[bot])
    + chore(deps): bump maven-dependency-plugin from 3.4.0 to 3.5.0
    (PR #3845 by @dependabot[bot])
    + chore(deps): update junit5 monorepo to v5.9.2 (PR #3840 by
    @renovate[bot])
    + Minor refactoring on Difference class (PR #3839 by @jlerbsc)
    + chore(deps-dev): bump assertj-core from 3.23.1 to 3.24.1 (PR
    [#3837] by @dependabot[bot])
    + chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 (PR
    [#3834] by @dependabot[bot])
    + chore(deps): bump checkstyle from 10.5.0 to 10.6.0 (PR #3829
    by @dependabot[bot])
  * Fixed
    + Fix: Method hasScope must return true on
    NodeWithOptionalScope and No… (PR #3875 by @jlerbsc)
    + fix #3859 UnsupportedOperationException when trying to
    resolve a type… (PR #3873 by @abego)
    + Fix: issue 3866 Symbol solver is unable to resolve inner
    classes of ancestors when they are prefixed with a subclass
    (PR #3868 by @jlerbsc)
    + Fix: issue 3703 Allow removing empty parentheses after
    removing all pairs from an annotation (PR #3865 by @jlerbsc)
    + Fix: One must be able to know if any resolved type is a boxed
    primiti… (PR #3864 by @jlerbsc)
    + Fix: Issue 2374 Comments of added Nodes are ignored in
    LexicalPreserv… (PR #3856 by @jlerbsc)
    + Checkstyle for unused import (PR #3841 by @4everTheOne)
    + Update bnd file (PR #3783 by @jlerbsc)
  * Developer Changes
    + Update javaparser copyright headers (PR #3862 by @jlerbsc)
  * Uncategorised
    + Add test case to verify range calculation on ArrayType (PR
    [#3828] by @jlerbsc)
    + Add test case to verify that LexicalPreservation supports
    TextBlock (PR #3827 by @jlerbsc)
    + Refactoring: Removing useless method convertToUsage in
    JavaParserFacade (PR #3780 by @jlerbsc)</changelog>
</package>
<package pkgid="5ad311eed582a2e4b8dd2fc3efa2f9aef061c1bcc88750c9f7c1b1df56b6736f" name="javaparser" arch="src">
  <version epoch="0" ver="3.25.1" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of javaparser 3.3.5</changelog>
  <changelog author="fstrba@suse.com" date="1646913600">- Upgrade to the latest version 3.24.0
  * A long list of fixes is to be found at https://github.com/
    /javaparser/javaparser/blob/master/changelog.md
  * Upgrade needed to be able to upgrade jctools and make them
    not depend hard on Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Upgrade to upstream version 3.24.2
  * Fixes:
    + Adding constructor descriptor
    + Fix issue #3491  Method has a multidimensional arrays argument
    in jar file. when call the method throw
    UnsolvedSymbolException
    + Fix issue #3218 GetSourceRoots() does not return all source
    roots
    + Bug in ArrayCreationExpr constructors
    + Fix issue 3440 Removing a node with LexicalPreservingPrinter
    causes UnsupportedOperationException
    + Improve unit test for BlockStmtContextResolutionTest
    + Improve Conditional Operator resolution [JLS 15.25]
    + Fix issue #3526 Variable or FieldDeclaration is not resolved
    correctly when another variable with the same name is
    declared in the same block</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1669550400">- Upgrade to upstream version 3.24.8
  * Added
    + [Fixes #3099] Added ability to solve type with a list of
    expected type arguments
    + [Suggestion] NonNull generator for parameters
  * Changed
    + Updated workflow to only run one job per PR
    + Remove or comment system.out.println statement in unit tests
    + Added Optional method in SymbolReference
    + Centralized management of symbol solver exceptions to prevent
    exception type Erasion
  * Fixed
    + Fix issue #1827 Issue resolving a constructor of a class
    using generics
    + Fix issue #3728 ParseProblemException
    + Updated Badge for Build and Coverage
    + Position
    + Fix part of issue #3721 UnsupportedOperationException while
    trying to modify the type of a variable
    + Implemented isReferenceType in ResolvedTypeDeclaration and
    isTypeParameter in ResolvedTypeParameterDeclaration
  * Developer Changes
    + chore(deps): bump versions-maven-plugin from 2.12.0 to 2.13.0
    + Fix maven wrapper not found in generator scripts
    + chore(deps): bump actions/checkout from 3.0.2 to 3.1.0
  * Uncategorised
    + Change issue 1945 test to paramaterized
    + More unit tests for JavaToken and CodeGenerationUtils
- Upgrade to upstream version 3.24.7
  * Highlights
    + Issue #3415
  * Changed
    + Refactoring - use of existing methods
    + Refactoring adding convenient methods to know if a
    DifferenceElement is added, removed or kept
  * Deprecated
    + Issue #3415
  * Fixed
    + Fix for ReflectionAnnotationDeclaration getClassName()
    + Fix some yield expressions not recognized
    + Accept final in instanceof pattern
    + [Fix] Avoid test failure due to line separator differences on
    windows host
    + Fix issue #3700 Removing last statement with
    LexicalPreservingPrinter results in loss of indendation
    + Fix issue #3678 Function accepts a configuration but it does
    not do anything
- Upgrade to upstream version 3.24.3
  * API or Behaviour Change
    + Issue #3405 thread safety of pre/postprocessors (incl.
    breaking change to Processor with pre/post processor
    methods).
  * Changed
    + Minor refactoring to manage check in range and use hasRange
    method in class CommentsInserter
    + Renaming PACKAGE_PRIVATE to NONE (this refers to the
    discussion in the issue #2242)
  * Fixed
    + Fix documentation of JAVA_17
    + Fix issue 3631 NameExpr.resolve() does not take end of inner
    block scopes into account
    + Fix issue #3588 Modifier is removed when removing an
    annotation
    + Fix lambda generic types that are always resolved to the
    first type param
    + Fix issue #3489 SourceRoot.tryToParse() fails if the root
    path ends with a directory that is not a java identifier
    + Default pretty printer should print inner-class receiver
    parameters on constructors
    + Issue #3405 thread safety of pre/postprocessors (incl.
    breaking change to Processor with pre/post processor
    methods).
  * Developer Changes
    + chore(deps): update actions/checkout action to v3.0.1
    + official Apache Maven wrapper
    + chore(deps): update codecov/codecov-action action to v3
    + chore(deps): update dependency org.jacoco:jacoco-maven-plugin
    to v0.8.8
    + chore(deps): update dependency
    org.apache.maven.plugins:maven-clean-plugin to v3.2.0
    + chore(deps): update dependency
    org.apache.maven.plugins:maven-surefire-plugin to v3.0.0-m6
- Re-enable modules:
  javaparser-symbol-solver-{core,logic,model,testing}
- Add build dependency on mvn(org.javassist:javassist)
- Update summary and description</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1670846400">- Upgrade to upstream version 3.24.9
  * Highlights
    + Remove "executable" bit from code files (PR #3755 by @icmdaf)
  * Added
    + Created TypeSolverBuilder (PR #3421 by @4everTheOne)
  * Changed
    + Changing, in test classes, the initialization of the lexical
    preserva… (PR #3779 by @jlerbsc)
    + chore(deps): bump maven-dependency-plugin from 3.3.0 to 3.4.0
    (PR #3770 by @dependabot[bot])
    + chore(deps): bump maven-install-plugin from 3.0.1 to 3.1.0
    (PR #3756 by @dependabot[bot])
  * Fixed
    + Fix: #3195 Resolved methods in outer classes not inferred
    correcly (PR #3778 by @jlerbsc)
    + Fix: #3681 LineComment alwaysing trimming content (PR #3777
    by @jlerbsc)
    + Fix: #3773 Replacing nodes causes error in lexical preserving
    printer… (PR #3776 by @jlerbsc)
    + Fix: #2517 Modifying some nodes with the lexicalPreservation
    enabled … (PR #3775 by @jlerbsc)
    + Fix: #3725 JavaParserFacade var type in for-each loop cannot
    be resolved (PR #3768 by @abego)
    + Fix: #3216 LexicalPreservingPrinter add Wrong indentation
    when removing comments (PR #3766 by @jlerbsc)
    + Fix: #3472 Line comment removal causes IllegalStateException
    with LexicalPreservingPrinter (PR #3765 by @jlerbsc)
    + Fix: #3441 LexicalPreservingPrinter prints wrong output with
    line com… (PR #3764 by @jlerbsc)
    + Fix: #2137 ClassOrInterfaceDeclaration addMember using index
    (PR #3763 by @jlerbsc)
    + Fix: #3761 Lexical preserving corrupts source when adding a
    modifier in first position (PR #3762 by @jlerbsc)
    + Fix: #3693 Removing modifiers from method declaration results
    in loss… (PR #3760 by @jlerbsc)
    + Fix: #3750 Lexical preserving corrupts source (PR #3759 by
    @jlerbsc)
    + Fix: Fix the indentation generated by the
    LexicalPreservingPrinter wh… (PR #3758 by @jlerbsc)
  * Security
    + Remove "executable" bit from code files (PR #3755 by @icmdaf)
- Add build dependency on mvn(org.checkerframework:checker-qual)</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674907200">- Upgrade to upstream version 3.24.10
  * Added
    + Add a method in LexicalPreservingPrinter to know if LPP is
    available/activated on the specified node (PR #3823 by
    @jlerbsc)
    + Handle nested records (PR #3814 by @mernst)
    + Source printer import ordering strategy (PR #3807 by
    @4everTheOne)
  * Changed
    + chore(deps): bump versions-maven-plugin from 2.14.1 to 2.14.2
    (PR #3817 by @dependabot[bot])
    + Enabled import validation (PR #3812 by @4everTheOne)
    + Part 5 | Import organization (PR #3805 by @4everTheOne)
    + Part 4 | Import organization (PR #3804 by @4everTheOne)
    + Part 3 | Import organization (PR #3803 by @4everTheOne)
    + Part 2 | Import organization (PR #3802 by @4everTheOne)
    + Part 1 | Import organization (PR #3801 by @4everTheOne)
    + Checkstyle configuration tweaks (PR #3799 by @4everTheOne)
    + chore(deps): bump versions-maven-plugin from 2.13.0 to 2.14.1
    (PR #3797 by @dependabot[bot])
    + chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 (PR
    [#3789] by @dependabot[bot])
    + chore(deps): bump checkstyle from 8.45.1 to 10.5.0 (PR #3788
    by @dependabot[bot])
  * Fixed
    + explicit use asString for performance (PR #3821 by @dencat)
    + Fix: issue #3818 Wrong range calculation on ArrayType with
    multiple d… (PR #3820 by @jlerbsc)
    + Fix: Lexical Preserving Fails To Remove Comment (PR #3810 by
    @jlerbsc)
  * Developer Changes
    + chore(deps): bump versions-maven-plugin from 2.13.0 to 2.14.0
    (PR #3794 by @dependabot[bot])
    + Basic CheckStyle validation (PR #3781 by @4everTheOne)
  * Uncategorised
    + Fix: 3412 Remove walkmod again (PR #3806 by @jlerbsc)</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1678276800">- Upgrade to upstream version 3.25.1
  * API or Behaviour Change
    + Fix: Issue 3045 Unexpected exception when solving type inside
    an Anonymous class (PR #3896 by @jlerbsc)
  * Added
    + Improved search for functional interfaces (PR #3894 by
    @jlerbsc)
  * Changed
    + chore(deps): bump maven-compiler-plugin from 3.10.1 to 3.11.0
    (PR #3928 by @dependabot[bot])
    + chore(deps): bump checkstyle from 10.7.0 to 10.8.0 (PR #3927
    by @dependabot[bot])
    + chore(deps): bump versions-maven-plugin from 2.14.2 to 2.15.0
    (PR #3914 by @dependabot[bot])
    + chore(deps): bump maven-javadoc-plugin from 3.4.1 to 3.5.0
    (PR #3906 by @dependabot[bot])
    + Refactor: cleanup/refactor code after fixing #3859 (PR #3886
    by @abego)
  * Fixed
    + Fix: issue 3924 Removing ImportDeclaration with Annotated
    package thr… (PR #3926 by @jlerbsc)
    + Fix: issue 3918 JavaParserTypeDeclarationAdapter resolving
    wrong Type via Ancestor (PR #3921 by @jlerbsc)
    + Fix: issue 3919 ResolvedType::isAssignableBy(ResolvedType) is
    wrong f… (PR #3920 by @jlerbsc)
    + Fix: issue 3911 java.lang.UnsupportedOperationException: T[]
    while resolving generic method with type parameter with
    arrays like List&lt;T[]&gt; (PR #3917 by @jlerbsc)
    + Fix: \s escape gives lexical error but should be valid since
    Java 15 (PR #3903 by @jlerbsc)
    + Fix: Issue 3045 Unexpected exception when solving type inside
    an Anonymous class (PR #3896 by @jlerbsc)
    + Fix issue 1883 Finding lambda return type (PR #3890 by
    @jlerbsc)
    + Fix: issue 1815 ArrayIndexOutOfBoundsException when resolving
    lambda parameter. This fix is offered by Blackgen (PR #3888
    by @jlerbsc)
  * Developer Changes
    + chore(deps): bump checkstyle from 10.6.0 to 10.7.0 (PR #3885
    by @dependabot[bot])
- Upgrade to upstream version 3.25.0
  * Added
    + First part of the implementation of least upper bound logic
    (PR #3880 by @jlerbsc)
    + feat: Improved support for calculating the type of an object
    creation… (PR #3877 by @jlerbsc)
    + feat: Implement addRecord &amp; getRecordByName for
    CompilationUnit (PR #3836 by @marcluque)
    + Support Jigsaw requires static (PR #3826 by @jlerbsc)
    + Add toDescriptor to ResolvedMethodDeclaration (PR #3819 by
    @vanHekthor)
    + Refactoring context (WIP) (PR #3792 by @jlerbsc)
    + Refactoring context (WIP) (PR #3782 by @jlerbsc)
    + Refactoring convert to usage (PR #3774 by @jlerbsc)
    + Simplified usage of class AssociableToAST (PR #3063 by
    @4everTheOne)
  * Changed
    + Revert import related checkstyle rule from error to warning
    (PR #3881 by @jlerbsc)
    + Minor refactoring for example to get all parameter types (PR
    [#3879] by @jlerbsc)
    + Add header and footer methods in comments instead of using
    literal st… (PR #3876 by @jlerbsc)
    + In the context of lexical preservation, the CSM token must be
    added m… (PR #3874 by @jlerbsc)
    + Refactoring: remove useless code that is already implemented
    (PR #3869 by @jlerbsc)
    + Memory usage improvement when printing a node from the
    LexicalPreserv… (PR #3858 by @jlerbsc)
    + chore(deps-dev): bump assertj-core from 3.24.1 to 3.24.2 (PR
    [#3852] by @dependabot[bot])
    + chore(deps): bump maven-checkstyle-plugin from 3.2.0 to 3.2.1
    (PR #3846 by @dependabot[bot])
    + chore(deps): bump maven-dependency-plugin from 3.4.0 to 3.5.0
    (PR #3845 by @dependabot[bot])
    + chore(deps): update junit5 monorepo to v5.9.2 (PR #3840 by
    @renovate[bot])
    + Minor refactoring on Difference class (PR #3839 by @jlerbsc)
    + chore(deps-dev): bump assertj-core from 3.23.1 to 3.24.1 (PR
    [#3837] by @dependabot[bot])
    + chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 (PR
    [#3834] by @dependabot[bot])
    + chore(deps): bump checkstyle from 10.5.0 to 10.6.0 (PR #3829
    by @dependabot[bot])
  * Fixed
    + Fix: Method hasScope must return true on
    NodeWithOptionalScope and No… (PR #3875 by @jlerbsc)
    + fix #3859 UnsupportedOperationException when trying to
    resolve a type… (PR #3873 by @abego)
    + Fix: issue 3866 Symbol solver is unable to resolve inner
    classes of ancestors when they are prefixed with a subclass
    (PR #3868 by @jlerbsc)
    + Fix: issue 3703 Allow removing empty parentheses after
    removing all pairs from an annotation (PR #3865 by @jlerbsc)
    + Fix: One must be able to know if any resolved type is a boxed
    primiti… (PR #3864 by @jlerbsc)
    + Fix: Issue 2374 Comments of added Nodes are ignored in
    LexicalPreserv… (PR #3856 by @jlerbsc)
    + Checkstyle for unused import (PR #3841 by @4everTheOne)
    + Update bnd file (PR #3783 by @jlerbsc)
  * Developer Changes
    + Update javaparser copyright headers (PR #3862 by @jlerbsc)
  * Uncategorised
    + Add test case to verify range calculation on ArrayType (PR
    [#3828] by @jlerbsc)
    + Add test case to verify that LexicalPreservation supports
    TextBlock (PR #3827 by @jlerbsc)
    + Refactoring: Removing useless method convertToUsage in
    JavaParserFacade (PR #3780 by @jlerbsc)</changelog>
</package>
<package pkgid="ea9480b8fe1d4127bd82ddc9070965c97660c4a80c3659873cf9a1eb8082d759" name="javaparser-javadoc" arch="noarch">
  <version epoch="0" ver="3.25.1" rel="150200.3.7.11"/>
  <changelog author="fstrba@suse.com" date="1569931200">- Initial packaging of javaparser 3.3.5</changelog>
  <changelog author="fstrba@suse.com" date="1646913600">- Upgrade to the latest version 3.24.0
  * A long list of fixes is to be found at https://github.com/
    /javaparser/javaparser/blob/master/changelog.md
  * Upgrade needed to be able to upgrade jctools and make them
    not depend hard on Java 8</changelog>
  <changelog author="fstrba@suse.com" date="1653307200">- Upgrade to upstream version 3.24.2
  * Fixes:
    + Adding constructor descriptor
    + Fix issue #3491  Method has a multidimensional arrays argument
    in jar file. when call the method throw
    UnsolvedSymbolException
    + Fix issue #3218 GetSourceRoots() does not return all source
    roots
    + Bug in ArrayCreationExpr constructors
    + Fix issue 3440 Removing a node with LexicalPreservingPrinter
    causes UnsupportedOperationException
    + Improve unit test for BlockStmtContextResolutionTest
    + Improve Conditional Operator resolution [JLS 15.25]
    + Fix issue #3526 Variable or FieldDeclaration is not resolved
    correctly when another variable with the same name is
    declared in the same block</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1669550400">- Upgrade to upstream version 3.24.8
  * Added
    + [Fixes #3099] Added ability to solve type with a list of
    expected type arguments
    + [Suggestion] NonNull generator for parameters
  * Changed
    + Updated workflow to only run one job per PR
    + Remove or comment system.out.println statement in unit tests
    + Added Optional method in SymbolReference
    + Centralized management of symbol solver exceptions to prevent
    exception type Erasion
  * Fixed
    + Fix issue #1827 Issue resolving a constructor of a class
    using generics
    + Fix issue #3728 ParseProblemException
    + Updated Badge for Build and Coverage
    + Position
    + Fix part of issue #3721 UnsupportedOperationException while
    trying to modify the type of a variable
    + Implemented isReferenceType in ResolvedTypeDeclaration and
    isTypeParameter in ResolvedTypeParameterDeclaration
  * Developer Changes
    + chore(deps): bump versions-maven-plugin from 2.12.0 to 2.13.0
    + Fix maven wrapper not found in generator scripts
    + chore(deps): bump actions/checkout from 3.0.2 to 3.1.0
  * Uncategorised
    + Change issue 1945 test to paramaterized
    + More unit tests for JavaToken and CodeGenerationUtils
- Upgrade to upstream version 3.24.7
  * Highlights
    + Issue #3415
  * Changed
    + Refactoring - use of existing methods
    + Refactoring adding convenient methods to know if a
    DifferenceElement is added, removed or kept
  * Deprecated
    + Issue #3415
  * Fixed
    + Fix for ReflectionAnnotationDeclaration getClassName()
    + Fix some yield expressions not recognized
    + Accept final in instanceof pattern
    + [Fix] Avoid test failure due to line separator differences on
    windows host
    + Fix issue #3700 Removing last statement with
    LexicalPreservingPrinter results in loss of indendation
    + Fix issue #3678 Function accepts a configuration but it does
    not do anything
- Upgrade to upstream version 3.24.3
  * API or Behaviour Change
    + Issue #3405 thread safety of pre/postprocessors (incl.
    breaking change to Processor with pre/post processor
    methods).
  * Changed
    + Minor refactoring to manage check in range and use hasRange
    method in class CommentsInserter
    + Renaming PACKAGE_PRIVATE to NONE (this refers to the
    discussion in the issue #2242)
  * Fixed
    + Fix documentation of JAVA_17
    + Fix issue 3631 NameExpr.resolve() does not take end of inner
    block scopes into account
    + Fix issue #3588 Modifier is removed when removing an
    annotation
    + Fix lambda generic types that are always resolved to the
    first type param
    + Fix issue #3489 SourceRoot.tryToParse() fails if the root
    path ends with a directory that is not a java identifier
    + Default pretty printer should print inner-class receiver
    parameters on constructors
    + Issue #3405 thread safety of pre/postprocessors (incl.
    breaking change to Processor with pre/post processor
    methods).
  * Developer Changes
    + chore(deps): update actions/checkout action to v3.0.1
    + official Apache Maven wrapper
    + chore(deps): update codecov/codecov-action action to v3
    + chore(deps): update dependency org.jacoco:jacoco-maven-plugin
    to v0.8.8
    + chore(deps): update dependency
    org.apache.maven.plugins:maven-clean-plugin to v3.2.0
    + chore(deps): update dependency
    org.apache.maven.plugins:maven-surefire-plugin to v3.0.0-m6
- Re-enable modules:
  javaparser-symbol-solver-{core,logic,model,testing}
- Add build dependency on mvn(org.javassist:javassist)
- Update summary and description</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1670846400">- Upgrade to upstream version 3.24.9
  * Highlights
    + Remove "executable" bit from code files (PR #3755 by @icmdaf)
  * Added
    + Created TypeSolverBuilder (PR #3421 by @4everTheOne)
  * Changed
    + Changing, in test classes, the initialization of the lexical
    preserva… (PR #3779 by @jlerbsc)
    + chore(deps): bump maven-dependency-plugin from 3.3.0 to 3.4.0
    (PR #3770 by @dependabot[bot])
    + chore(deps): bump maven-install-plugin from 3.0.1 to 3.1.0
    (PR #3756 by @dependabot[bot])
  * Fixed
    + Fix: #3195 Resolved methods in outer classes not inferred
    correcly (PR #3778 by @jlerbsc)
    + Fix: #3681 LineComment alwaysing trimming content (PR #3777
    by @jlerbsc)
    + Fix: #3773 Replacing nodes causes error in lexical preserving
    printer… (PR #3776 by @jlerbsc)
    + Fix: #2517 Modifying some nodes with the lexicalPreservation
    enabled … (PR #3775 by @jlerbsc)
    + Fix: #3725 JavaParserFacade var type in for-each loop cannot
    be resolved (PR #3768 by @abego)
    + Fix: #3216 LexicalPreservingPrinter add Wrong indentation
    when removing comments (PR #3766 by @jlerbsc)
    + Fix: #3472 Line comment removal causes IllegalStateException
    with LexicalPreservingPrinter (PR #3765 by @jlerbsc)
    + Fix: #3441 LexicalPreservingPrinter prints wrong output with
    line com… (PR #3764 by @jlerbsc)
    + Fix: #2137 ClassOrInterfaceDeclaration addMember using index
    (PR #3763 by @jlerbsc)
    + Fix: #3761 Lexical preserving corrupts source when adding a
    modifier in first position (PR #3762 by @jlerbsc)
    + Fix: #3693 Removing modifiers from method declaration results
    in loss… (PR #3760 by @jlerbsc)
    + Fix: #3750 Lexical preserving corrupts source (PR #3759 by
    @jlerbsc)
    + Fix: Fix the indentation generated by the
    LexicalPreservingPrinter wh… (PR #3758 by @jlerbsc)
  * Security
    + Remove "executable" bit from code files (PR #3755 by @icmdaf)
- Add build dependency on mvn(org.checkerframework:checker-qual)</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1674907200">- Upgrade to upstream version 3.24.10
  * Added
    + Add a method in LexicalPreservingPrinter to know if LPP is
    available/activated on the specified node (PR #3823 by
    @jlerbsc)
    + Handle nested records (PR #3814 by @mernst)
    + Source printer import ordering strategy (PR #3807 by
    @4everTheOne)
  * Changed
    + chore(deps): bump versions-maven-plugin from 2.14.1 to 2.14.2
    (PR #3817 by @dependabot[bot])
    + Enabled import validation (PR #3812 by @4everTheOne)
    + Part 5 | Import organization (PR #3805 by @4everTheOne)
    + Part 4 | Import organization (PR #3804 by @4everTheOne)
    + Part 3 | Import organization (PR #3803 by @4everTheOne)
    + Part 2 | Import organization (PR #3802 by @4everTheOne)
    + Part 1 | Import organization (PR #3801 by @4everTheOne)
    + Checkstyle configuration tweaks (PR #3799 by @4everTheOne)
    + chore(deps): bump versions-maven-plugin from 2.13.0 to 2.14.1
    (PR #3797 by @dependabot[bot])
    + chore(deps): bump actions/checkout from 3.1.0 to 3.2.0 (PR
    [#3789] by @dependabot[bot])
    + chore(deps): bump checkstyle from 8.45.1 to 10.5.0 (PR #3788
    by @dependabot[bot])
  * Fixed
    + explicit use asString for performance (PR #3821 by @dencat)
    + Fix: issue #3818 Wrong range calculation on ArrayType with
    multiple d… (PR #3820 by @jlerbsc)
    + Fix: Lexical Preserving Fails To Remove Comment (PR #3810 by
    @jlerbsc)
  * Developer Changes
    + chore(deps): bump versions-maven-plugin from 2.13.0 to 2.14.0
    (PR #3794 by @dependabot[bot])
    + Basic CheckStyle validation (PR #3781 by @4everTheOne)
  * Uncategorised
    + Fix: 3412 Remove walkmod again (PR #3806 by @jlerbsc)</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1678276800">- Upgrade to upstream version 3.25.1
  * API or Behaviour Change
    + Fix: Issue 3045 Unexpected exception when solving type inside
    an Anonymous class (PR #3896 by @jlerbsc)
  * Added
    + Improved search for functional interfaces (PR #3894 by
    @jlerbsc)
  * Changed
    + chore(deps): bump maven-compiler-plugin from 3.10.1 to 3.11.0
    (PR #3928 by @dependabot[bot])
    + chore(deps): bump checkstyle from 10.7.0 to 10.8.0 (PR #3927
    by @dependabot[bot])
    + chore(deps): bump versions-maven-plugin from 2.14.2 to 2.15.0
    (PR #3914 by @dependabot[bot])
    + chore(deps): bump maven-javadoc-plugin from 3.4.1 to 3.5.0
    (PR #3906 by @dependabot[bot])
    + Refactor: cleanup/refactor code after fixing #3859 (PR #3886
    by @abego)
  * Fixed
    + Fix: issue 3924 Removing ImportDeclaration with Annotated
    package thr… (PR #3926 by @jlerbsc)
    + Fix: issue 3918 JavaParserTypeDeclarationAdapter resolving
    wrong Type via Ancestor (PR #3921 by @jlerbsc)
    + Fix: issue 3919 ResolvedType::isAssignableBy(ResolvedType) is
    wrong f… (PR #3920 by @jlerbsc)
    + Fix: issue 3911 java.lang.UnsupportedOperationException: T[]
    while resolving generic method with type parameter with
    arrays like List&lt;T[]&gt; (PR #3917 by @jlerbsc)
    + Fix: \s escape gives lexical error but should be valid since
    Java 15 (PR #3903 by @jlerbsc)
    + Fix: Issue 3045 Unexpected exception when solving type inside
    an Anonymous class (PR #3896 by @jlerbsc)
    + Fix issue 1883 Finding lambda return type (PR #3890 by
    @jlerbsc)
    + Fix: issue 1815 ArrayIndexOutOfBoundsException when resolving
    lambda parameter. This fix is offered by Blackgen (PR #3888
    by @jlerbsc)
  * Developer Changes
    + chore(deps): bump checkstyle from 10.6.0 to 10.7.0 (PR #3885
    by @dependabot[bot])
- Upgrade to upstream version 3.25.0
  * Added
    + First part of the implementation of least upper bound logic
    (PR #3880 by @jlerbsc)
    + feat: Improved support for calculating the type of an object
    creation… (PR #3877 by @jlerbsc)
    + feat: Implement addRecord &amp; getRecordByName for
    CompilationUnit (PR #3836 by @marcluque)
    + Support Jigsaw requires static (PR #3826 by @jlerbsc)
    + Add toDescriptor to ResolvedMethodDeclaration (PR #3819 by
    @vanHekthor)
    + Refactoring context (WIP) (PR #3792 by @jlerbsc)
    + Refactoring context (WIP) (PR #3782 by @jlerbsc)
    + Refactoring convert to usage (PR #3774 by @jlerbsc)
    + Simplified usage of class AssociableToAST (PR #3063 by
    @4everTheOne)
  * Changed
    + Revert import related checkstyle rule from error to warning
    (PR #3881 by @jlerbsc)
    + Minor refactoring for example to get all parameter types (PR
    [#3879] by @jlerbsc)
    + Add header and footer methods in comments instead of using
    literal st… (PR #3876 by @jlerbsc)
    + In the context of lexical preservation, the CSM token must be
    added m… (PR #3874 by @jlerbsc)
    + Refactoring: remove useless code that is already implemented
    (PR #3869 by @jlerbsc)
    + Memory usage improvement when printing a node from the
    LexicalPreserv… (PR #3858 by @jlerbsc)
    + chore(deps-dev): bump assertj-core from 3.24.1 to 3.24.2 (PR
    [#3852] by @dependabot[bot])
    + chore(deps): bump maven-checkstyle-plugin from 3.2.0 to 3.2.1
    (PR #3846 by @dependabot[bot])
    + chore(deps): bump maven-dependency-plugin from 3.4.0 to 3.5.0
    (PR #3845 by @dependabot[bot])
    + chore(deps): update junit5 monorepo to v5.9.2 (PR #3840 by
    @renovate[bot])
    + Minor refactoring on Difference class (PR #3839 by @jlerbsc)
    + chore(deps-dev): bump assertj-core from 3.23.1 to 3.24.1 (PR
    [#3837] by @dependabot[bot])
    + chore(deps): bump actions/checkout from 3.2.0 to 3.3.0 (PR
    [#3834] by @dependabot[bot])
    + chore(deps): bump checkstyle from 10.5.0 to 10.6.0 (PR #3829
    by @dependabot[bot])
  * Fixed
    + Fix: Method hasScope must return true on
    NodeWithOptionalScope and No… (PR #3875 by @jlerbsc)
    + fix #3859 UnsupportedOperationException when trying to
    resolve a type… (PR #3873 by @abego)
    + Fix: issue 3866 Symbol solver is unable to resolve inner
    classes of ancestors when they are prefixed with a subclass
    (PR #3868 by @jlerbsc)
    + Fix: issue 3703 Allow removing empty parentheses after
    removing all pairs from an annotation (PR #3865 by @jlerbsc)
    + Fix: One must be able to know if any resolved type is a boxed
    primiti… (PR #3864 by @jlerbsc)
    + Fix: Issue 2374 Comments of added Nodes are ignored in
    LexicalPreserv… (PR #3856 by @jlerbsc)
    + Checkstyle for unused import (PR #3841 by @4everTheOne)
    + Update bnd file (PR #3783 by @jlerbsc)
  * Developer Changes
    + Update javaparser copyright headers (PR #3862 by @jlerbsc)
  * Uncategorised
    + Add test case to verify range calculation on ArrayType (PR
    [#3828] by @jlerbsc)
    + Add test case to verify that LexicalPreservation supports
    TextBlock (PR #3827 by @jlerbsc)
    + Refactoring: Removing useless method convertToUsage in
    JavaParserFacade (PR #3780 by @jlerbsc)</changelog>
</package>
<package pkgid="92ee501bb1cf76767b4e183a88c202698b4b4efc6a9b0ddb3db454fb86639757" name="jetty-annotations" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="811d6a49874e8a72c444222eb733a2b8f388b93c6a5b9dcc343826a854918d2c" name="jetty-ant" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="2580b76c2fca3623e684ea01943f65e62c8a29cc7a0621ba911769a739c36b11" name="jetty-cdi" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="c17b6bd0ad23b39b4a3e3ede287da65691fcc3c029401da427979bf408e4d887" name="jetty-client" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="5f06e2621f7d97608e260db5476a688960b66c687b472ed7cc959f808c5fa354" name="jetty-continuation" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="50b5ccdf7042ac1b32b7fc699c4b0a591027adb0b8fddd0ab79ec892a2c827d3" name="jetty-deploy" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="97b76bdeda1b5f1a8fac801eda5878dd8ef6de21662488f76fb1e98ca32c9f56" name="jetty-fcgi" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="b92298503ac700eee7968fcf15f7dc480d70d1a8c5808c72fba6f43ea25b3fb8" name="jetty-http" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="5a77964b8e63a94fea9f371f73f3c3acbb761f1875b26d3503ae4db18f0c0220" name="jetty-http-spi" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="7707a597d4cb50d35137591fb71281058561da5c596b60f42ad548b366da33e3" name="jetty-io" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="6d697cbe61eb429f44cf79fafcc095a6eebd98c522fe313b0bd7936eea24214c" name="jetty-jaas" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="989868eacb2cb5650b3373badba2e3db92dcac8773dfffa4eadc8127d39c1033" name="jetty-jmx" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="1d539ba3366371e65053d64be6c502d14bd8db872eb677ec16d93223b3e92f04" name="jetty-jndi" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="c6d0c68d55b2071a5a377cca7118e25481ce9748364f85817932f36a60a4733c" name="jetty-jsp" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="b640bc64f1c0d810076784611c2bad64428c109eb53379c74df97566939d962f" name="jetty-minimal" arch="src">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="3c364426e193e68dacdaac1e6e8ef45387bbc54912b66c7e7b53c07f729d9292" name="jetty-minimal-javadoc" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="4f50187175a6c37ef7c1a25354377f9d0a5d10e7de8097a8eadf06a2209ef53d" name="jetty-openid" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="8f71cd50a657a6ef7510b6d2948309e384db77310974286dc35e2cb89abd5905" name="jetty-plus" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="5ba9f97a922b57481d12c6ef18a970ab89adfd068c6d11c79388f4923db3e6d6" name="jetty-proxy" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="e60007d418211184b0ad73ea4d041f45c3081ee589b3f805ef97da4b3ca9967d" name="jetty-quickstart" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="3924eaa83be4bf4fa0b1e44e001b23327068c532569e1895f144bec95814c70b" name="jetty-rewrite" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="db58f7c77592d1f264e7a8874f29f8a819fbfc33a3600a0370446b5431f3c7a1" name="jetty-security" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="a5a3a813b3fe4fd6e98608154c657857ab0d18286df5cd059c52228604682bc1" name="jetty-server" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="30e8469eb644f096f88553cc127d89141d1e7f59ce27cb6ad15c47ba719985b1" name="jetty-servlet" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="a6693849f4a8f053657a34b7d9d6f1b0921d0715d34d5f1191ebac0a1f356848" name="jetty-servlets" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="e5729b0cebd8a551506df336801ea1c12ce4bbd7eb79e0487f71baea04e06118" name="jetty-start" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="0954fcf96f708006c5a76b7a9b8c72699a2cd7522e77bf46dfd54fdeb804f0ab" name="jetty-util" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="d4d190d6c5f37a2ca2bebaf6172c903f0dc517de4fffedb4073a30694e260e00" name="jetty-util-ajax" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="c28549e47711520a4a84815608b9f01df8655547ac0015b196dce405e46e18de" name="jetty-webapp" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="139ebae37c26887beb33a882133ae54c282002a472a8704c3ef8e98b14e4cbc8" name="jetty-xml" arch="noarch">
  <version epoch="0" ver="9.4.51" rel="150200.3.19.2"/>
  <changelog author="fstrba@suse.com" date="1572955200">- Initial packaging of a minimal version of jetty 9.4.19.v20190610
  * This version is light on dependencies</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to upstream version 2.9.22.v20191022
  * new jetty-openid amd jetty-util-ajax sub-packages
- Modified patch:
  * jetty-annotations-asm6.patch
    + adapt to changed context
  + build against asm6 instead of asm7 that we don't have
- Fix some rpmlint warnings and errors</changelog>
  <changelog author="fstrba@suse.com" date="1574942400">- Removed patch:
  * jetty-annotations-asm6.patch
    + not needed when building against ASM7</changelog>
  <changelog author="fstrba@suse.com" date="1585828800">- Upgrade to upstream version 9.4.27.v20200227</changelog>
  <changelog author="fstrba@suse.com" date="1605787200">- Upgrade to upstream version 9.4.30.v20200611</changelog>
  <changelog author="fstrba@suse.com" date="1607342400">- Upgrade to upstream version 9.4.35.v20201120
  * Fixes bsc#1179727, CVE-2020-27218</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to upstream version 9.4.38.v20210224
  * Fixes bsc#1182898, CVE-2020-27223</changelog>
  <changelog author="rpm@fthiessen.de" date="1620993600">- Update to version 9.4.40.v20210413
  * Fix: bsc#1184367, CVE-2021-28165 - jetty server high CPU when
    client send data length &gt; 17408
  * Fix: bsc#1184368, CVE-2021-28164 - Normalize ambiguous URIs
  * Fix: bsc#1184366, CVE-2021-28163 - Exclude webapps directory
    from deployment scan</changelog>
  <changelog author="fstrba@suse.com" date="1623240000">- Update to version 9.4.42.v20210604
  * Fix: bsc#1187117, CVE-2021-28169</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1624881600">- Package modules: ant, cdi, deploy, fcgi, http-spi, quickstart,
  rewrite, start, unixsocket</changelog>
  <changelog author="fstrba@suse.com" date="1626696000">- Update to version 9.4.43.v20210629
  * Fix: bsc#1188438, CVE-2021-34429
  * Changes:
    + Improve alias checking in PathResource
    + java.nio.ReadOnlyBufferException
    + Deprecate support for UTF16 encoding in URIs
    + Update to spifly 1.3.3
    + Update to asm 9.1</changelog>
  <changelog author="fstrba@suse.com" date="1626696001">- Splitting the jetty-unixsocket artifact into a separate spec file
  in order to avoid extra dependencies for the jetty-minimal
  package.</changelog>
  <changelog author="fstrba@suse.com" date="1634644800">- Make importing of package sun.misc optional since not all jdk
  versions export it</changelog>
  <changelog author="fstrba@suse.com" date="1647950400">- Build with java source and target levels 8
- Fix javadoc generation on JDK &gt;= 13</changelog>
  <changelog author="fstrba@suse.com" date="1648555200">- Upgrade to version 9.4.46.v20220328
  * Changes
    + Option --write-module-graph produces wrong .dot file
    + ArrayTrie getBest fails to match the empty string entry in
    certain cases
    + Interrupt flag is not always cleared in between requests
    + Gzip compression not working for multipart/form-data when
    added to the allowed list using addIncludedMimeTypes.
    + Miconfigured headerCacheSize in can result in
    IllegalArgumentException
    + HttpServletResponse.encodeURL not working for URLs starting
    with ../</changelog>
  <changelog author="fstrba@suse.com" date="1657281600">- Upgrade to version 9.4.48.v20220622
  * Fixes
    + #8184 - All suffix globs except first fail to match if path
    has "." character in prefix section
    + #8145 - RegexPathSpec backport of optional group name/info
    lookup if regex fails
    + #8088 - Add option to configure exitVm on ShutdownMonitor from
    System properties
    + #8067 - Wall time usage in DoSFilter RateTracker results in
    false positive alert
    + #8014 - Review HttpRequest URI construction (Resolves
    CVE-2022-2047, bsc#1201317)
    + #7976 - Add TRANSFER_ENCODING violation for MultiPart RFC7578
    parser
    + #7947 - Improved PathSpec handling for servletName &amp; pathInfo
    + #7935 - Review HTTP/2 error handling (Resolves CVE-2022-2048,
    bsc#1201316)
    + #7918 - PathMappings.asPathSpec does not allow root
    ServletPathSpec
    + #7863 - Default servlet drops first accept-encoding header if
    there is more than one.
    + #7858 - GZipHandler does not play nice with other handlers in
    HandlerCollection
    + #7837 - Fix StatisticsHandler in the case a Handler throws
    exception
    + #7809 - Jetty 9.4.x 7801 duplicate set session cookies
    + #7748 - Allow overriding of url-pattern mapping in
    ServletContextHandler to allow for regex or uri-template
    matching</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="dimstar@opensuse.org" date="1683201600">- Add _multibuild to define 2nd spec file as additional flavor.
  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="fstrba@suse.com" date="1684670400">- Update to version 9.4.51.v20230217
  * Fixes of 9.4.49.v20220914:
    + #8578 - getRequestURL can append "null" if getRequestURI is
    unspecified in an authority-form request-target
    + #8493 - Review HTTP client feature setRemoveIdleDestinations
  * Fixes of 9.4.50.v20221201:
    + #8774 - Added SizeLimitHandler
    + #8678 - Jetty client is not responding to GO_AWAY packet
    received from (Jetty) Server and continue to send traffic on
    same connection
  * Fixes of 9.4.51.v20230217:
    + #9352 - Update / Fix CookieCutter
    + #9345 - Backport Multipart Fix for CVE-2023-26048, bsc#1210620
    + #9352 - Backport Cookie Parsing Fix for CVE-2023-26049,
    bsc#1210621</changelog>
</package>
<package pkgid="bb97cdc3f442d0daa80eed0d9b7b0776def9267c339e15ac417f3f2c46904a08" name="junit5" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
</package>
<package pkgid="99ffcb68fd4fcad97a5290610b56fc36d728de3df103019b540849e50f54cfb9" name="junit5" arch="src">
  <version epoch="0" ver="5.8.2" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
</package>
<package pkgid="2c4581e5372dc8339ca9fefb4439dc3981d8e830c07205232df9bf60ef5d35cd" name="junit5-bom" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
</package>
<package pkgid="1fb3e4f2f584ed2891de55108a6e76a75d1b9e6b27e943164dc909418935a339" name="junit5-guide" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
</package>
<package pkgid="ee71f3762d8ec69df14243a5eca7ec200fbbf8b6f728d2e00adb4bd81f19bcb5" name="junit5-javadoc" arch="noarch">
  <version epoch="0" ver="5.8.2" rel="150200.3.6.1"/>
  <changelog author="fstrba@suse.com" date="1554984000">- Initial packaging of junit5 5.4.0</changelog>
  <changelog author="fstrba@suse.com" date="1573214400">- Upgrade to junit5 5.5.2
- Distribute also the manifest-only junit-jupiter artifact
- Build the console by default, since picocli package exists now</changelog>
  <changelog author="fstrba@suse.com" date="1646308800">- Package also the bill-of-materials pom</changelog>
  <changelog author="fstrba@suse.com" date="1652097600">- Update to upstream version 5.8.2
  * Fixes:
    + Text blocks in @CsvSource are treated like CSV files
    + CSV headers in display names for @CsvSource and
    @CsvFileSource
    + Custom quote character support in @CsvSource and
    @CsvFileSource
    + Support for text blocks in @CsvSource
    + Java 18 support in the JRE enum
    + Access to the ExecutionMode in the ExtensionContext
    + Declarative test suites via @Suite classes
    + LauncherSession and accompanying listener
    + New UniqueIdTrackingListener
    + More fine-grained Java Flight Recorder events
    + Java Flight Recorder support on Java 8 Update 262 or
    higher
    + Test class ordering
    + @TempDir can be used to create multiple temporary
    directories
    + Extension registration via @ExtendWith on fields and
    parameters
    + Auto-close support for arguments in @ParameterizedTest
    methods
- Fix the classpath of console application so that it actually
  works</changelog>
</package>
<package pkgid="1d777ce842e148a198d1f869d66656152b77cab45aad93b2777b516a6f9575b5" name="kernel-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="b19683ef6f1d36a38a7811acda5d1d0b83a2dea60b14da2354b732131975b84c" name="kernel-azure" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="e003dfa3b81ea8f55ad5d43fdb1b36563ca6bdbed2dd6f5b9908a3c63466de8a" name="kernel-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="daffd5775090ad4ddbeaf110812426aea3e8359595da96f57779cbf0f5a61ba0" name="kernel-azure-devel" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="f504fc75e2fd4a4420569885ceeaca8e5fd0433fa8c5375fda00fd5ee8cb5685" name="kernel-azure-devel" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="911d896f9ac27214c840dea982ba17d991da5348f24ebf2b6e6a520bcfa5503f" name="kernel-azure-extra" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="e2ea7eb0e94a843c25787913db024ffa1974ab5e54133fad5807eb1d7bd7e1eb" name="kernel-azure-extra" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="9f66cecb669b17a6c9afcb2e6b87e2c58fa8a5e189ef2234831afb1929d0512f" name="kernel-azure-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="249016e8a6d3e6f89a209cc159d321f0b087540bb3b7028fe795bdaa4368c5ef" name="kernel-azure-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="b2f043d2fb4978f22978754d7d2fe7a251bea736e26231a2506a66f6718ce2be" name="kernel-azure-optional" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="3d729760f3a82e11f72fd8baf64b39e24157e61a6b9b2de1d2e15b2dad43f4db" name="kernel-azure-optional" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="c1d5cacc0d08eceddb2ff777367448ea54f88ea5d3294e53b797755b15cd970d" name="kernel-azure-vdso" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="5cb8fccbe38b7d2adbc4bc767191a6a48517ccb334aeb3f7d9b4e455a2ccdf71" name="kernel-devel-azure" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="7adf8a9e9f8e978d0cf5c623672538838642aecb0bf0334372d1066323faf3b2" name="kernel-source-azure" arch="noarch">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="bcc7712f148f5e3c2568c688b48a6b21f2f4e86574d3a5f2e3b1e20e50e42189" name="kernel-source-azure" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="99351df8f5bb2a208a4348b15d678b6e5637fbf49da59430062833ab55690066" name="kernel-syms-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="de33881561bcf6a7c5b210923713898afcba62f9450f6127efe4cb2c081769c1" name="kernel-syms-azure" arch="src">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="62bedf8e226115c82c972bc4934988cc96a7532c111b4e177764f6987964c090" name="kernel-syms-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="1328c3d7e072fef393ccf887f231375a1e6749273d667b8d84555967ed839c0c" name="kernel-vanilla" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="3d333065b7a7c56873a8ee6c170cb53d8168b25914d816c2af3d9acb4a069e66" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="69482706601d87e2cc997f24d0b459e0a1c054a7ec9b3c2cdf7cec8185d47642" name="kernel-vanilla" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="b92106673010e3020f754a5bfd20f5cbe88ae5dd112720c5577a51c0148e3d8b" name="kernel-vanilla" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="a8898a58d9db0a8f12513e18222f77c9f75f4fd4d51fedd16245d84c88c76193" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="84b5e8066144fe8bdc8ce5dee7ab63cbc1a85af53b24949b76d0174c10a9a0d5" name="kernel-vanilla-base" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="b44f4829eaf3109be9573ade27a90ea765ffe4c42f8edde38b8cd0d0482f6446" name="kernel-vanilla-base" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="8e1070f40e9df03f4d4f92b7baa40701a9fba90583b88d77f3239518b51b33ad" name="kernel-vanilla-base" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="1921b64d0362d99f3a23422a6768be75a87cbe71e66bfab37335487f6db2bbdb" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="7dac42e3ee286d77da96d5c7dedf2b5d1a55b1ac300ecb1607084eb4d67d64ed" name="kernel-vanilla-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="f3fe43bfc4b29e2147ae30fb683d02e3ef9c5fdd1cc3a86e2ecc6c2a4f822efd" name="kernel-vanilla-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="9c725b29033c1e3947c076a4097b1a050f2dd0c7dd6eea996bf01c7a107c8ea9" name="kernel-vanilla-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="d7eef43292e1f511dc857189071fa06ce38dec21cedc4765f8be11ee6fd2a124" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="1772ce54f28c1bcb19fae105f2cd3e253b16d74fc21d04de8e34dbd90357564f" name="kernel-vanilla-livepatch-devel" arch="aarch64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="5bc76e2880a69bb8743cc1e5dcb4ae421a2fbac1f906218755957942d790e0ee" name="kernel-vanilla-livepatch-devel" arch="ppc64le">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="e478aaa81e175913f34a95af0f0b587b0ad98f5bfaab4888fc3888e12126f7ba" name="kernel-vanilla-livepatch-devel" arch="s390x">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="17e0f08845e5c27e20f440add3be79e5185da86f14f267db5ce0b7c6b77a6695" name="kernel-vanilla-livepatch-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="150100.197.148.1"/>
  <changelog author="jlee@suse.com" date="1684411200">- i2c: xgene-slimpro: Fix out-of-bounds bug in
  xgene_slimpro_i2c_xfer() (bsc#1210715 CVE-2023-2194).
- commit 3e58c3b</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684411201">- net: sched: sch_qfq: prevent slab-out-of-bounds in
  qfq_activate_agg (bsc#1210940 CVE-2023-31436).
- commit a507e94</changelog>
  <changelog author="tiwai@suse.de" date="1684497600">- media: ttusb-dec: fix memory leak in ttusb_dec_exit_dvb()
  (CVE-2022-45887 bsc#1205762).
- media: dvb-core: Fix use-after-free due to race condition at
  dvb_ca_en50221 (CVE-2022-45919 bsc#1205803).
- media: dvb-core: Fix use-after-free due to race at
  dvb_register_device() (CVE-2022-45884 bsc#1205756).
- media: dvb-core: Fix use-after-free due on race condition at
  dvb_net (CVE-2022-45886 bsc#1205760).
- media: dvb-core: Fix kernel WARNING for blocking operation in
  wait_event*() (CVE-2023-31084 bsc#1210783).
- media: dvb-core: Fix use-after-free on race condition at
  dvb_frontend (CVE-2022-45885 bsc#1205758).
- media: dvbdev: fix error logic at dvb_register_device()
  (CVE-2022-45884 bsc#1205756).
- media: dvbdev: Fix memleak in dvb_register_device
  (CVE-2022-45884 bsc#1205756).
- media: media/dvb: Use kmemdup rather than duplicating its
  implementation (CVE-2022-45884 bsc#1205756).
- commit f7cc9c8</changelog>
  <changelog author="tiwai@suse.de" date="1684497601">- media: dvb_net: kABI workaround (CVE-2022-45886 bsc#1205760).
- media: dvb_frontend: kABI workaround (CVE-2022-45885
  bsc#1205758).
- commit df5f28a</changelog>
  <changelog author="tiwai@suse.de" date="1684497602">- Move upstreamed media fixes into sorted section
- commit 488e428</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1684756800">- ipv6: sr: fix out-of-bounds read when setting HMAC data
  (bsc#1211592).
- commit b97c30d</changelog>
  <changelog author="msuchanek@suse.de" date="1684756801">- kernel-source: Remove unused macro variant_symbols
- commit 915ac72</changelog>
  <changelog author="msuchanek@suse.de" date="1685361600">- Remove usrmerge compatibility symlink in buildroot (boo#1211796)
  Besides Makefile depmod.sh needs to be patched to prefix /lib/modules.
  Requires corresponding patch to kmod.
- commit b8e00c5</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1685361601">- tcp: Fix data races around icsk-&gt;icsk_af_ops (bsc#1204405
  CVE-2022-3566).
- commit 75b4182</changelog>
  <changelog author="msuchanek@suse.de" date="1685620800">- Fix usrmerge error (boo#1211796)
- commit da84579</changelog>
  <changelog author="msuchanek@suse.de" date="1685707200">- usrmerge: Compatibility with earlier rpm (boo#1211796)
- commit 2191d32</changelog>
  <changelog author="ohering@suse.de" date="1685707201">- Drivers: hv: vmbus: Optimize vmbus_on_event (bsc#1211622).
- scsi: storvsc: Parameterize number hardware queues
  (bsc#1211622).
- commit da8e380</changelog>
  <changelog author="msuchanek@suse.de" date="1686052800">- kernel-binary: Add back kernel-default-base guarded by option
  Add configsh option for splitting off kernel-default-base, and for
  not signing the kernel on non-efi
- commit 8ad6a28</changelog>
  <changelog author="msuchanek@suse.de" date="1686139200">- Generalize kernel-doc build requirements.
- commit 23b058f</changelog>
  <changelog author="msuchanek@suse.de" date="1686139201">- Trim obsolete KMP list.
  SLE11 is out of support, we do not need to handle upgrading from SLE11
  SP1.
- commit 08819bb</changelog>
  <changelog author="msuchanek@suse.de" date="1686139202">- Move obsolete KMP list into a separate file.
  The list of obsoleted KMPs varies per release, move it out of the spec
  file.
- commit 016bc55</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686139203">- gve: Remove the code of clearing PBA bit (bsc#1211519).
- gve: Secure enough bytes in the first TX desc for all TCP pkts
  (bsc#1211519).
- gve: Cache link_speed value from device (bsc#1211519).
- gve: Handle alternate miss completions (bsc#1211519).
- gve: Adding a new AdminQ command to verify driver (bsc#1211519).
- gve: Fix error return code in gve_prefill_rx_pages()
  (bsc#1211519).
- gve: Reduce alloc and copy costs in the GQ rx path
  (bsc#1211519).
- gve: Fix GFP flags when allocing pages (bsc#1211519).
- google/gve:fix repeated words in comments (bsc#1211519).
- gve: Fix spelling mistake "droping" -&gt; "dropping" (bsc#1211519).
- gve: enhance no queue page list detection (bsc#1211519).
- commit a03ff0e</changelog>
  <changelog author="msuchanek@suse.de" date="1686139204">- Avoid unsuported tar parameter on SLE12
- commit f11765a</changelog>
  <changelog author="msuchanek@suse.de" date="1686139205">- Move the kernel-binary conflicts out of the spec file.
  Thie list of conflicting packages varies per release.
  To reduce merge conflicts move the list out of the spec file.
- commit cbb1a06</changelog>
  <changelog author="fweisbecker@suse.de" date="1686139206">- sched/rt: pick_next_rt_entity(): check list_entry (bsc#1208600 CVE-2023-1077)
- commit 6b28935</changelog>
</package>
<package pkgid="2de9e3d8ada2d8693b3fe57a2aa51dd42cfd2e54eb2dd097b4226fc7ee07c591" name="kselftests-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="9876a5147d6ab4d8dc62590ad59b97528e98c2f5b89a23722a5bd958ed1bb3ea" name="kselftests-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="79cd2d861aab40a93867d1b2b8a1d665b9c27aed9d0f1130f1427bd79089608b" name="kubernetes1.18" arch="src">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="107abe413c49090738cdb94fd8bf0f512d6e58965650802d758eceeda5f38b77" name="kubernetes1.18" arch="src">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="e7b697b1e62d8ba836daabbb3e7aade6c88641b05874c4986f1855b0f507d2dc" name="kubernetes1.18-client" arch="aarch64">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="92e8fc7c87a1109c380d022ad05544744b8f5c6a59a01e5ce65ca312186001a4" name="kubernetes1.18-client" arch="ppc64le">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="e7c5e731efed7c953e3ad3589f6f07269b83d347fd79e0907b625fa68c5c512f" name="kubernetes1.18-client" arch="s390x">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="9f471d7929ccb6d6fd0fd8b3c9e992859270c5207f8f3879f4ea69d08d7a47b8" name="kubernetes1.18-client" arch="x86_64">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="f99f9bb7b0b79cc78323a65df192051a8b3fba6afe2fb09972554c0fdb27e979" name="kubernetes1.18-client" arch="aarch64">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="fe0cee5dd987b592fca05fa76f2c685320b2d2a4a4c4bfbb7496ced1ff7685ca" name="kubernetes1.18-client" arch="ppc64le">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="034641a1f6abe80b336b83aff8a0406665cdb701461a409276e11c9aa1be0f8d" name="kubernetes1.18-client" arch="s390x">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="67b951a6f7705d2a76a810d15594940edd004c65dbceadb8e1fedaada409f207" name="kubernetes1.18-client" arch="x86_64">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="5275f3d49bb5854923b823d04cf6ab65447c0e7d991dcc245b2a0278b3320f88" name="kubernetes1.18-client-common" arch="aarch64">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="aaaa0483a745041e281d339545dab8a8a108ee8ce611efcddde06d7b5663c14e" name="kubernetes1.18-client-common" arch="ppc64le">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="fa235a2f60b2339ad9a6b24478b9d7efb731bf570eaaa482b182e4a5a428411b" name="kubernetes1.18-client-common" arch="s390x">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="8641875a834d719884e89f01ee4da408a42723368a886136d2b59902d7cf111e" name="kubernetes1.18-client-common" arch="x86_64">
  <version epoch="0" ver="1.18.10" rel="150200.5.10.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="cc6ba0e5535c0715b08603a6289de7ce1ea679d052346db6f9568b16b8c5e408" name="kubernetes1.18-client-common" arch="aarch64">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="ba57d946ce34b20495f3ed994575e75baff29d5a005bdd88b722b00f1be15464" name="kubernetes1.18-client-common" arch="ppc64le">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="5b35481510c9d46aade25dd0cccfc6284c77598aaa11ee5372243b20e3d6832b" name="kubernetes1.18-client-common" arch="s390x">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="e86abc8b6d013ccad7b9787d3493177299eae2a99de5d4411cb44764b33373fe" name="kubernetes1.18-client-common" arch="x86_64">
  <version epoch="0" ver="1.18.10" rel="150200.5.12.1"/>
  <changelog author="bwiedemann@suse.com" date="1591790400">- Add reproducible-buildid.patch to make package build reproducible</changelog>
  <changelog author="rbrown@suse.com" date="1591790401">- Remove %{?_smp_mflags} to make build more reliable [boo#1172744]</changelog>
  <changelog author="dmueller@suse.com" date="1592481600">- Update to version 1.18.4:
  * enable floating IP for IPv6
  * Extend AWS azToRegion method to support Local Zones and other partitions
  * kubelet: block non-forwarded packets from crossing the localhost boundary
  * Deflake port-forward e2e test
  * Fix fieldType being dropped by older go-clients
  * FieldManager: Reset if we receive nil or a list with one empty item
  * set dest prefix and port for IPv6 sg rule
  * fieldManager: Ignore and log all errors when updating managedFields
  * Make kubectl tolerate other versions of the CSR API
  * Changes to ManagedFields is not mutation for GC
  * fix a number of unbounded dimensions in request metrics
  * build: Use debian-hyperkube-base@v1.0.0 image
  * Check for GCE finalizer in GetLoadBalancer.
  * Fix csi-provisioner image for pd csi driver
  * hyperkube: Build v1.0.0 image
  * build: Add dependency entries for debian-hyperkube-base
  * Update CNI to v0.8.6
  * Fix public IP not shown issues after assigning public IP to Azure VMs
  * Skip Pod Conditions from scheduling queue updates
  * add test for finalizers
  * skip unnecessary scheduling attempt when pod's finalizers change
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.3
  * Add back anti-affinity to kube-dns pods.
  * Check for empty zone string
  * Azure - do not use 0 zone or empty string for zone when creating PVs
  * Fix client-ca dynamic reload in apiserver
  * Fix exclusive CPU allocations being deleted at container restart
  * Update strategy used to reuse CPUs from init containers in CPUManager</changelog>
  <changelog author="dmueller@suse.com" date="1592827200">- avoid verbose diagnostic print on start of kubelet</changelog>
  <changelog author="dmueller@suse.com" date="1594728000">- move newest kubernetes-client to update-alternatives with kuberlr</changelog>
  <changelog author="dmueller@suse.com" date="1594728001">- Update to version 1.18.5:
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5-rc.1
  * hyperkube: Use debian-hyperkube-base@v1.1.0 image
  * hyperkube: Build debian-hyperkube-base v1.1.0 image
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.4
  * kubeadm join: Wait longer for TLS bootstrapping
  * CSI: Modify VolumeAttachment check to use Informer/Cache
  * Fix log timestamps to be displayed in fixed width</changelog>
  <changelog author="dmueller@suse.com" date="1594814400">- Update to version 1.18.6:
  * Don't return proxied redirects to the client
  * Include pod /etc/hosts in ephemeral storage calculation for eviction
  * Fix throttling issues when Azure VM computer name prefix is different from VMSS name
  * kube-proxy ipvs masquerade hairpin traffic
  * kubeadm: add --port=0 for kube-controller-manager and kube-scheduler
  * Wait for all informers to sync in /readyz.
  * Fix bug in reflector not recovering from "Too large resource version" errors
  * Delete default load balancer source range (0.0.0.0/0) to prevent redundant network security rules.
  * hyperkube: Use debian-hyperkube-base@v1.1.1 image
  * debian-hyperkube-base/Dockerfile: Add iproute2 package
  * debian-hyperkube-base/Dockerfile: Cleanup spacing
  * debian-hyperkube-base/Dockerfile: Alpha-sort packages
  * test: add unit test
  * fix: use force detach for azure disk
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.5
  * Add tests covering startup probe without readiness
  * Pods which have not "started" can not be "ready"
  * add docu + fix copyright year
  * fix: don't use docker config cache if it's empty
  * fix#92167: GetLabelsForVolume panic issue for azure disk PV
  * Fix DS expectations on recreate
  * kubelet, kube-proxy: unmark packets before masquerading them
  * kubeadm: don't re-add an etcd member if it already exists for "join"
  * some tests for new function
  * go-to-protobuf: fix rewrite of embedded struct fields
  * Windows tests: Makes gMSA test more nanoserver friendly
  * kubelet: fix `/stats/summary` endpoint on Windows when init-containers are present on the node</changelog>
  <changelog author="rbrown@suse.com" date="1597406400">- Update to version 1.18.8:
  * [go1.13] Update to go1.13.15
  * [go1.15] build: Update to k/repo-infra@v0.0.12 (supports go1.15.0)
  * Update others OWNERS files from master
  * Promote spiffxp to build/ approver
  * build: Update Debian base images
  * build: Remove Debian base image building
  * Update to json-patch 4.8.0
  * Revert "Automated cherry pick of #89629: fix 68211: modified subpath configmap mount fails when"
  * Azure: per VMSS, incremental VMSS VMs cache
  * Fix panic on /readyz
  * add dashpole as kubelet approver
  * Fix instance not found issues when an Azure Node is recreated in a short time
  * Use local daemonset manifest for installing Nvidia drivers
  * Fix scheduler issue with nodetree additions
  * tests: Fixes Windows kubelet-stats test
  * Fix a bug whereby reusable CPUs and devices were not being honored
  * Simplify logic in devicemanager TopologyHint generation
  * Add AnySet() to topologymanager bitmask API
  * update e2e test
  * autogen files update
  * fix 68211: modified subpath configmap mount fails when container restart
  * Fix ListZonesInRegion() after client BasePath change
  * Update Golang to v1.13.14
  * Add bazel_skylib_workspace to fix make bazel-test 'no matching toolchains found' error
  * Update repo-infra to v0.0.8 (to support go1.14.6 and go1.13.14)
  * build: Update to repo-infra@v0.0.5 to support go1.14.3 and go1.13.11
  * Update to repo-infra v0.0.4
  * Update bazel to 2.2.0
  * fix: initial delay in mounting azure disk/file
  * Skip ensuring VMSS in pool for nodes which should be excluded from lb
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.6
  * defaultpodtopologyspread: access listers in plugin instantiation</changelog>
  <changelog author="dmueller@suse.com" date="1597752000">- update url</changelog>
  <changelog author="rbrown@suse.com" date="1597752001">- Correct invalid use of %{_libexecdir} to ensure files should be in /usr/lib</changelog>
  <changelog author="jevrard@suse.com" date="1597924800">- Relax constraints on kubeadm</changelog>
  <changelog author="jevrard@suse.com" date="1597924801">- Remove old macro on maxcriversion, with the new relaxed constraints</changelog>
  <changelog author="rbrown@suse.com" date="1597924802">- Harmonise macro names, use baseversionminus1 across all k8s packages for previous version number</changelog>
  <changelog author="rbrown@suse.com" date="1598616000">- Introduce kubernetes$FOO-client-common package to make -client truely parralel installable</changelog>
  <changelog author="rbrown@suse.com" date="1599480000">- kubernetes%{baseversion}-kubeadm now obsoletes kubernetes%{baseversionminus1}-kubeadm</changelog>
  <changelog author="rbrown@suse.com" date="1600344000">- Update to version 1.18.9:
  * e2e: backport regenerate namespace name if the name is already taken #90591
  * Update CNI plugins to v0.8.7
  * azure: use the parsed value from the configuration
  * Cherry pick of #93908: Updating EndpointSlice controllers to return if error encountered
  * Update snapshot controller to use k8s.gcr.io
  * test(kuberuntime): deflake TestRemoveContainer
  * kubectl describe pod: use ReportingController as an event source
  * Fix an issue when rotated logs of dead containers are not removed.
  * Append suffix 'i' only if needed
  * Fixed reflector not recovering from "Too large resource version" errors with API servers 1.17.0-1.18.5
  * let panics propagate up when processLoop panic
  * Add impersonated user to system:authenticated group
  * cleanup: print warning message after timeout
  * Revert "cleanup: decrease log level from warn to v3"
  * cleanup: decrease log level from warn to v3
  * Remove duplicate nodeSelector
  * fix(azure): check error returned by scaleSet.getVMSS
  * remove oom TestStartingWatcher ""unit"" test
  * Ensuring EndpointSlice controller does not create EndpointSlices for Services that are being deleted.
  * If firstTimestamp is not set use eventTime when printing event
  * kubectl: fix the Scheduled eventTime is &lt;unknown&gt; when use kubectl describe pod xxx
  * Update json-patch to v4.9.0 tagged release
  * Improve EndpointController's handling of headless services under dual-stack
  * Improve EndpointController dual-stack testing
  * Fix Endpoint/EndpointSlice pod change detection
  * Updating EndpointSlice controller to wait for all caches to be synced
  * Fix bug for inconsistent lists served from etcd
  * test(kubelet): add a regression test to verify kubelet would not panic
  * fix(kubelet): protect `containerCleanupInfos` from concurrent map writes
  * Keep track of remaining pods when a node is deleted.
  * add sjenning as kubelet approver
  * Remove direct accesses to cache's node map
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.8
  * Add tests for out of band attachments
  * Update e2e csi images to k8s.gcr.io
  * "unbound immediate PersistentVolumeClaims" should be UnschedulableAndUnresolvable error
  * Make AttachDisk idempotent again
  * Do not evict pods which tolerate all NoExecute taints
  * Fix namespace controller cleanup orphaning
  * Add labelSelector validation to Affinity/AntiAffinity score plugin
  * Use NLB Subnet CIDRs instead of VPC CIDRs in updateInstanceSecurityGroupsForNLB
  * Make nested /volume/ repo images overridable
  * fix: update max azure disk max count
  * Do not swallow NotFound error for DeletePod in dsc.manage</changelog>
  <changelog author="rbrown@suse.com" date="1602763200">- Update to version 1.18.10:
  * Fix reporting network_programming_latency metrics in kube-proxy
  * Azure: fix node removal race condition on VMSS deletion
  * make download-or-bust compatible with both sha512/sha1
  * replace sha1 with sha512
  * use more granular buckets for azure api calls
  * avoid potential secret leaking while reading .dockercfg
  * Mask Ceph RBD adminSecrets in logs when logLevel &gt;= 4
  * fix: azure disk resize error if source does not exist
  * fix detach azure disk issue when vm not exist
  * Fix UpdateSnapshot when Node is partially removed
  * kubeadm: make the CP join handling of kubeconfig similar to "init"
  * kubeadm: warn but do not error out on missing CA keys on CP join
  * fix: detach azure disk broken on Azure Stack
  * Handle nil elements when sorting, instead of panicking
  * do not mutate endpoints in the apiserver
  * Remove HeadlessService label in endpoints controller before comparing
  * Update CHANGELOG/CHANGELOG-1.18.md for v1.18.9
  * count of etcd object should be limited to the specified resource
  * Track pods with required anti-affinity in scheduler NodeInfo and Snapshot.
  * Ensure getPrimaryInterfaceID not panic when network interfaces for Azure VMSS are null
  * Update staging/src/k8s.io/legacy-cloud-providers/azure/azure_loadbalancer_test.go
  * Allow 404 error on lb deletion in azure
  * chore: add diskclient.Update interface
  * chore: add diskclient.ListByResourceGroup interface
  * Fix doc for leader-elect-resource-lock flag</changelog>
  <changelog author="dcassany@suse.com" date="1605009600">- Build only kubernetes client subpackages on SLE</changelog>
  <changelog author="dcassany@suse.com" date="1606219200">- Adding a conflict on kubernetes client common to ensure there are no
  leftovers after migration from SP1 to SP2 on SLE15.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1684929600">- Security Patch Fix for  CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin ( CVE-2023-2728)</changelog>
</package>
<package pkgid="11a72b47c65ac83218970d5a1ab6fe7d317eb25547b0046464d67e3c9ccfd821" name="kubernetes1.23" arch="src">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="186e6b6aa59f8bce27b4c414983fe4df42830300296d57030038d4f7d3168238" name="kubernetes1.23" arch="src">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="bebd48d03b0c9a551e8296897116ca0ae6136fc079e1bb4e9a498ffa651dd99e" name="kubernetes1.23-apiserver" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="4383f238f1fe2ee51907738af21d2f2d38ac51509c808a1d572b8b612938f956" name="kubernetes1.23-apiserver" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="24b779f03976580e98e8a188945e387f3f56a1339abdf8a252dc16283af1543f" name="kubernetes1.23-apiserver" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="aab5221cf78849015b7d835a6541adb6f696d25aff41a6b66e24d13525d2f9fe" name="kubernetes1.23-apiserver" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="859eb7c7bb03a79c8f849e42ba3aec6ce24796acd105a56fca9428944a6972e3" name="kubernetes1.23-apiserver" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="88fc7c611cc307443789c3996b53b343f5adc656e06b038173a458bb25932682" name="kubernetes1.23-apiserver" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="5831f7fd86829f652f814a37dbeb8a98be6b0697f4cf95c7df728d8591a2eecc" name="kubernetes1.23-apiserver" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="d2f780d1d3357a5ab1ea796c7c9015cb81449b04c70d7371be6f2eef109599ac" name="kubernetes1.23-apiserver" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="4578a914bd9a3c6f69c600f083115eebce199ed1d023513cbe4ee402673f20d7" name="kubernetes1.23-client" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="6ee9d48d1cade4aeb02d551b12ae38c92c0554ae364e8fb0f43dfc3af08ccc13" name="kubernetes1.23-client" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="cc90c314e7b13832e2c2f9ceb0a40515a841e972975cf8e8676d63971bf7afe8" name="kubernetes1.23-client" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="5cc86983e7b274b9882062d6d020ac0dcf90f37b84288a2a575202568e977eba" name="kubernetes1.23-client" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="2ac8599722a6e0b7a32b7098d633a712a5cd83caf5f075fd8a4a81776509d37f" name="kubernetes1.23-client" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="5b55b1f184ff9f0220a77a3a5a26a67401d5ae97c2de5ade91aa8190f3afdf2e" name="kubernetes1.23-client" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="1b76f4653a6a0f21a65f584ee7f751eee01002fc6d5913b971ae6942e7bd22d5" name="kubernetes1.23-client" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="c2e222ed1ee945cea3fad2b1402212c4fc0b2fed773fc3d9ade671b354d9be72" name="kubernetes1.23-client" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="540f78e9cf97b968a16341716d08f5acd835e6d3959ecc386e696c921aa9d6de" name="kubernetes1.23-client-bash-completion" arch="noarch">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="435512f495f32dabea327b46a7026f96775ff1e6c96f6212ff2292b2a92274ee" name="kubernetes1.23-client-bash-completion" arch="noarch">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="e2c1942aea1c6b0ba25dbaab03a2579804e79661ce5c902a75f051f6ecc8979a" name="kubernetes1.23-client-common" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="455225e7454b33e3999229e5e54b932c7b71baa8b6140532da77c221589b3ec3" name="kubernetes1.23-client-common" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="afafebc797923272b3c26f0691d5153e5383c5aa29836dec5d8bf582776c8c88" name="kubernetes1.23-client-common" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="93c8e5efc2bfda34141cf31f6774537fb2786b18580d86bddc2f3a036db8b47f" name="kubernetes1.23-client-common" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="fc3d36ffb3a12e2241e8b9dd015f0eaa375506950f60f588fd0c1ce50c9202d9" name="kubernetes1.23-client-common" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="06390227d86d8b59965abf19b6745830cce55e5951cd36fbdfc80a83e38fd387" name="kubernetes1.23-client-common" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="f9a9d9af7685d932434ef1f2ea7107cb3461e71369939ccb40399798e5c52f05" name="kubernetes1.23-client-common" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="5a0bd6446948c70daddc343f15bda429f9295c9d87a1d1e266e9438aa05d7626" name="kubernetes1.23-client-common" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="b2ece2f89fc93bf164dbb41e9a3f79f10438ca22f05bbc715497c8aa0f066ed7" name="kubernetes1.23-client-fish-completion" arch="noarch">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="0211283523582951e22e630f2c90c05d6a5e00c1335e5d7e7b03c66a7835ce85" name="kubernetes1.23-client-fish-completion" arch="noarch">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="468606a56cd49b1b78070d43cfe77c482b1a221d21329f1556a12560f6eecc0c" name="kubernetes1.23-controller-manager" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="813fade9de839b2c960b636f965f1524f7bd4e459b2c6f728cd1890eb103b2ec" name="kubernetes1.23-controller-manager" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="c8df10ac5290c7293e4bdf8cb1c6d0fe5b94acec841a9a6def6dbb63edd4fd43" name="kubernetes1.23-controller-manager" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="8f8e01ee9b05c837b1aa8809c8e5fb66ea0a93b708810f72d955b7b496c771bc" name="kubernetes1.23-controller-manager" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="bb9d69f4d4e2e588002bfebfb070a0a7e36d8889469a4d1ee411ca124b7f0bc7" name="kubernetes1.23-controller-manager" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="d14b6663fa8918fc2261566174773a49655b408cff2972d8517203e5b3397733" name="kubernetes1.23-controller-manager" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="bdc7b5a6d7f3baf0dc6c5a9b5e0871e2a5d83119291b8efb1a384e79d5bea5e3" name="kubernetes1.23-controller-manager" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="0aaeaa8d5b7ed470714efd6322ff85898d0cb151055b45e6902ed0f06105a363" name="kubernetes1.23-controller-manager" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="af2008b55bc39ed0dcdac2c3beae45779e4cf383d8ccfa800fca5cce1ec6e18f" name="kubernetes1.23-kubeadm" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="06b43f9d92cb6754819dac966cd9ed4f7e2891fa728e499c3e43b730a8c23e47" name="kubernetes1.23-kubeadm" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="312e7b291897ccae46e4b71f4b34fbf7d4d3adeae5777dea9336d5c66666686b" name="kubernetes1.23-kubeadm" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="845d1fe610b872aaf8fcb1ee97b1475b6ea1c0e079a3a4e0338cf0e159f35d57" name="kubernetes1.23-kubeadm" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="7f6fd276a38273ddd867bf58d33c60bb94e77cc03bae5c6ea29833deffc5f3d1" name="kubernetes1.23-kubeadm" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="ac0a139c30e1e03dc72ea99c48fe20b5eec0fa337d5c376d23955144c4935a0c" name="kubernetes1.23-kubeadm" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="34a352e5730b80a9af95444f8e0c3a0821a3ced8d612a158e2e9b8cd2cbdd725" name="kubernetes1.23-kubeadm" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="f0e64814ca6b5483dd96d3903aafccf78a184bb2bf0d150a5d06b9cb33399f91" name="kubernetes1.23-kubeadm" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="0813b301ec6dafc5cedaaa67a44f639db78d023b622b7648ab84cdbfd5073dfd" name="kubernetes1.23-kubelet" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="a9ae6355c49cd9a88db01dfa23afbaa83a86efc462b807e011d4487d6ee68761" name="kubernetes1.23-kubelet" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="0e5dd1691e2e40570aad4cef0b598185288696fdc0cfcfc6efce561c7928b156" name="kubernetes1.23-kubelet" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="2f59f5352177d9d057591fb3572c5f48fd425506b45236161467dc48cb017cb9" name="kubernetes1.23-kubelet" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="22f7a4e941347f40485be26ea074e6b03df07cfabc8c36a02f39c4e2e6d2fc35" name="kubernetes1.23-kubelet" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="4838a0d59423472beeaa63e20b69cc78e1279050518b794357b4f7504ce3c49a" name="kubernetes1.23-kubelet" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="9e3160f7cc2447cb660dadff3d2f44a873689031e0285d01323e9d247477022f" name="kubernetes1.23-kubelet" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="786e8b4eef247718d3c9c44790254717792514892a97e9495017909417370c66" name="kubernetes1.23-kubelet" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="777caaf6200175a6f28bdeb0fea82ad81bdafbf0bd37c6eeaa17c7caf07edb6c" name="kubernetes1.23-kubelet-common" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="517aba57a87d77efcc59e6dd448280aeef5ff660cfe4e17c3a5573e433fe1c9a" name="kubernetes1.23-kubelet-common" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="4ce2882685f4df176df1bc1514b022d8dd408a2a31e581bb531d2cf83cbd9e26" name="kubernetes1.23-kubelet-common" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="85014f333a20bacbb9cad7e5f670ffca7e409ef936b6c367eec293e54d84b56f" name="kubernetes1.23-kubelet-common" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="09fc7a83a5705020f2f2dd2239bf7841e8ddc455a7e56e742dfb1bd8a057a800" name="kubernetes1.23-kubelet-common" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="3a55809efd68bdc0a21f14c8a18aa97c6091395bbc709bcb60a6c8464956fdbc" name="kubernetes1.23-kubelet-common" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="659815de9ee2434b50334c3bf7abf1cc63d6aeb6de11c557e1214f49cb9f7f99" name="kubernetes1.23-kubelet-common" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="5cebb7f99f0d9f21ae7c68949746697e6b6025e7aaa29cde5728deb3b920a45c" name="kubernetes1.23-kubelet-common" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="418f5201fb2b382edebeda1d75496bd4e8ba90bde4b76080a75a0f89a642b0a8" name="kubernetes1.23-proxy" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="6b55b8f1e3b9a31df9a87d68beb7c0af4cd00f0ce4af7651050dabaef6ed83f1" name="kubernetes1.23-proxy" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="034025146b5410c47dccfa121a49d4b0444de93dde21247d4db43afedd492dc5" name="kubernetes1.23-proxy" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="a96df4ddb90a7f0e3b76fa1d71f10b3a76fb89cb309b4fd9cb1b43d73ad9e60e" name="kubernetes1.23-proxy" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="ce2889db63279939ba120b3c2c723d35578b89eeac6ddfe6d5adc4e15bd4964f" name="kubernetes1.23-proxy" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="74fd60061eb5e64992cb255d51df7b91b4103a9cb5bcea425a9b205715e722d1" name="kubernetes1.23-proxy" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="3f4965aa0cda3b3b6930b69e8719c835b20a0fb59812f64bacb4088a7c550b9e" name="kubernetes1.23-proxy" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="1d215dfd3866bc684f7e11fdfe5792f55c6f8ba4ef0c2e083776b8ecec96d457" name="kubernetes1.23-proxy" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="6605536d0182b5aeeb1ece198db7daa32b532387dd2139e869d2cb90fbc17894" name="kubernetes1.23-scheduler" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="3d1e130cec81697b84e580b8187c814842698e51e2afbe0b478d3d2b440bb5e3" name="kubernetes1.23-scheduler" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="486df6b594e26c45828ab0dda1d5b8ff76961d31a0fa36270519675fe2950100" name="kubernetes1.23-scheduler" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="c9e6de7993f6343a04f0438f893867d17142e66edfd02e74884809a2ef54d203" name="kubernetes1.23-scheduler" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.3.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="d7077b19d44dbdf654c59485bb952f51cf1e13ddc53bcfbd582120f36aad8ee3" name="kubernetes1.23-scheduler" arch="aarch64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="27559f0e42d5de20295400e66982d0420e88080d51e4276a46659d1853a7666e" name="kubernetes1.23-scheduler" arch="ppc64le">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="e931ba6175bb26eecceb66d848212e2c7f09bb38a88980b5aeb2a7f5456fa707" name="kubernetes1.23-scheduler" arch="s390x">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="9826de30a2dcee12ac1979f03ee048e503a2645e697bbacedb997b4258876e4e" name="kubernetes1.23-scheduler" arch="x86_64">
  <version epoch="0" ver="1.23.17" rel="150500.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1638964800">- Initial Package</changelog>
  <changelog author="rbrown@suse.com" date="1639656000">- Restore &amp; rebase revert-coredns-image-renaming.patch from
  kubernetes1.22. Looks like it's still needed until all supported
  k8s versions allow us to change how we publish coredns containers</changelog>
  <changelog author="rbrown@suse.com" date="1642075200">- Increase _constraints to 13GB</changelog>
  <changelog author="dmueller@suse.com" date="1644235200">- avoid bashism in client-common postinstall script (bsc#1195391)</changelog>
  <changelog author="rbrown@suse.com" date="1647432000">- Update to version 1.23.4:
  * Update Go to 1.17.7
  * Use serializable struct for x-kubernetes-validations in openapi
  * Make JSON schema round tripping test more strict
  * ignore CRI PodSandboxNetworkStatus for host network pods
  * set secondary address on host-network pods
  * Deeply copy JSONSchemaProps.XValidations.
  * Ensure the execHostnameTest() compares hostnames
  * Revert "Fix comparison between FQDN and hostname"
  * service REST: Call Decorator(old) on update path
  * add namespace in azurefile volumeid
  * fix: azurefile volumeid conflict in csi migration
  * Mark device as uncertain if unmount device succeeds
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.3
  * kubelet: fix podstatus not containing pod full name
  * Fix bug with node restriction blocking pvc.status.resizestatus change
  * Fix regression pruning array fields with x-kubernetes-preserve-unknown-fields: true
  * Set max results if its not set
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.2
  * Update k/utils to v0.0.0-20211116205334-6203023598ed
  * [go] update to Go 1.17.6
  * fix: remove outdated ipv4 route when the corresponding node is deleted
  * fix: delete non existing disk issue
  * Revert "Automated cherry pick of #107554: Correct the feature gate string for RBD migration."
  * fix containers order after applying
  * generated: ./hack/update-vendor.sh
  * upgrade sigs.k8s.io/structured-merge-diff/v4 to v4.2.1
  * Execute sync before taking the snapshot
  * Correct the feature gate string for RBD migration.
  * fix: azuredisk parameter lowercase translation issue
  * removed unnecessary log line
  * kubectl: add integration test for result reporting
  * cli: let kubectl handle error printing
  * cli: avoid logging command line errors in more cases
  * Fix header mutation race in timeout filter
  * clear pod's .status.nominatedNodeName when necessary
  * use node informer to check volumes attachment status before backoff
  * When volume is not marked in-use, do not backoff
  * kubeadm: remove the restriction that the ca.crt can only contain one certificate
  * flake fix: remove the error handler for cronjob integration test
  * Fix the leak of vSphere client sessions
  * fix nil pointer in create secret commands
  * Fix order of commands in the snapshot tests for persistent volumes
  * client-go: Clear the ResourceVersionMatch on paged list calls
  * Improving performance of EndpointSlice controller metrics cache
  * fix the error when cleaning up jobs for cronjob
  * Update CHANGELOG to add missing release notes.
  * apf: ensure exempt request notes the classification
  * Enabling kube-proxy metrics on windows kernel mode
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.1
  * add gce loadbalancer no-op finalizer and existingFwdRule tests
  * disable gce service handling if has rbs forwarding rule
  * add ELBRbsFinalizer
  * add gce elb rbs opt-in annotation
  * cherry pick of knp 0.0.27
  * Remove JSON logging performance regression
  * Re-introduce removed kubectl --dry-run values.
  * Point flowcontrol users at v1beta2
  * [go1.17] Update to go1.17.5
  * dependencies: Update golang.org/x/net to v0.0.0-20211209124913-491a49abca63
  * mount-utils: Detect potential stale file handle
  * Skip creating HNS loadbalancer with empty endpoints
  * Add regression test for CPUManager distribute NUMA algorithm
  * Add unit test for CPUManager distribute NUMA algorithm verifying fixes
  * Fix accounting bug in CPUManager distribute NUMA policy
  * Fix error handling in CPUManager distribute NUMA tests
  * Add a sum() helper to the CPUManager cpuassignment logic
  * Allow the map.Values() function in the CPUManager to take a set of keys
  * Fix CPUManager algo to calculate min NUMA nodes needed for distribution
  * Fix unit tests following bug fix in CPUManager for map functions (2/2)
  * Fix unit tests following bug fix in CPUManager for map functions (1/2)
  * Fix bug in CPUManager map.Keys() and map.Values() implementations
  * Ensure we balance across *all* NUMA nodes in NUMA distribution algo
  * Short-circuit CPUManager distribute NUMA algo for unusable cpuGroupSize
  * Round the CPUManager mean and stddev calculations to the nearest 1000th
  * updated deprecation messages from 1.23 to 1.24
  * kubelet: set failed phase during graceful shutdown
  * kubeadm: avoid requiring a CA key during kubeconfig expiration checks
  * kubeadm: print the CA of kubeconfig files in "check expiration"
  * kubeadm: validate local etcd certficates during expiration checks
  * publishing-bot/doc: add component-helpers to the readme
  * publishing-bot/rules: remove non existing component-helpers branch 1.19 from the rules
  * Changelog: mention kube-scheduler bits deprication
  * rbd: initialize ceph monitors slice with an empty value.
  * Direct v2betaX users to migrate to HPA v2
  * DelegateFSGroupToCSIDriver e2e: skip tests with chgrp
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.0
  * [go1.17] Update to go1.17.4</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.23.5:
  * Remove apf_fd from httplog
  * Update Go to 1.17.8
  * cluster/gce: update konnectivity image tags to v0.0.30
  * bump sigs.k8s.io/apiserver-network-proxy/konnectivity-client@v0.0.30
  * fix dryrun when ca file exists
  * fix regression introduced by PR 100320
  * Add unit tests
  * Fix nodes volumesAttached status not updated
  * Fix default config flags
  * test/e2e/framework: include the new control plane taint
  * kubelet: Clean up a static pod that has been terminated before starting
  * Add an e2e test for updating a static pod while it restarts
  * cronjob_controllerv2: do not filter jobs to be reconciled by labels
  * kube-proxy: fix duplicate port opening
  * increase Azure ACR credential provider timeout
  * Updating EndpointSlice strategy to retain node name in topology until field is set
  * fix: do not return early in the node informer when there is no change of the topology label.
  * /test/e2e_kubeadm: adjust label checks for 1.23
  * Ignore container notfound error while getPodstatuses
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.4
  * Add PDB selector patch integration test
  * Revert v1beta1 PodDisruptionBudget select patchStrategy
  * test/e2e_kubeadm: fix matching UnversionedKubeletConfigMap defaults
  * kubeadm: fix the bug that 'kubeadm init --dry-run --upload-certs' command failed with 'secret not found' error
  * wrap error from RunCordonOrUncordon</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232001">- Update to version 1.23.6:
  * Update Go to 1.17.9
  * Fix: abort nominating a pod that was already scheduled to a node
  * Fix the overestimated cost of deletaged API requests in P&amp;F
  * omit enums from static openapi snapshots used to generate clients
  * Drop enum tag from certificate request condition
  * Addresses the issue which caused #109115
  * Add test for indexer with multiple values
  * Reduce number of pods in Job+GC tests
  * Adjust validation checks to pass for both client-side and server-side validation
  * Remove finalizer when orphaned
  * Fix: Clean job tracking finalizer from orphan pods
  * Add test for Background delete propagation
  * Add integration test for orphan pods when there is GC
  * Copy request in timeout handler
  * kube-up: use registry.k8s.io for containerd-related jobs
  * kubelet: If the container status is created, we are waiting
  * e2e: Wait only for the service account
  * e2e: Wait for kube-root-ca.crt to be created
  * client-go: update generated
  * default kubernetes agent for generated clients
  * Include pod UID in secret/configmap cache key
  * Move kubelet secret and configmap manager calls to sync_Pod functions
  * test: Verify that nodes do not transition to Failed while ready
  * test: Add E2E for job completions with cpu reservation
  * test: Add E2E for init container pod deletion
  * kubelet: Delay writing a terminal phase until the pod is terminated
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.5
  * generated: make update
  * polish comments of non-enum values.
  * unmark non-validated types as enums.</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232002">- Update to version 1.23.7:
  * Fix requests scope classification
  * Update Go to 1.17.10
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix OpenAPI loading error caused by empty APIService
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * component-base: replace url in rest client metrics
  * fix broken find command
  * Allow KUBE_TEST_REPO_LIST to be a remote url as well
  * Disable JobTrackingWithFinalizers due to unresolved bug
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.6
  * Correct event registration for multiple scheduler plugins.
  * kubelet: rename closeAllConns to onHeartbeatFailure
  * kubelet apiserver: be gentle closing connections on heartbeat failures
  * fix: race detected in TestErrConnKilled
  * Replace hardcoded kubectl with kubectl.Name()
  * kubectl: fix hard-coded value in zsh completion
  * kubeadm: add etcd flag for member data consistency
  * Fix a bug that out-of-tree plugin is misplaced when using scheduler v1beta3 config
  * ipvs: remove port opener
  * iptables: remove port opener
  * azure_file: try to get secret namespace from ClaimRef
  * azure_file: add namespace tests for InTree to CSI conversion</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232003">- Update to version 1.23.8:
  * Revert "Automated cherry pick of #109124: Winkernel proxier cache HNS data to improve syncProxyRules"
  * test: update graceful node shutdown e2e with watch
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.17.11
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * Enable resize feature
  * Reject proxy requests to 0.0.0.0 as well
  * ipvs: fix prevent concurrent map read and map write for 1.23
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.7
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * untangle fix with healthCheck feature
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Skip updating Endpoints and EndpointSlice if no relevant fields change</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232004">- Update to version 1.23.9:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * Bump cAdvisor to v0.43.1
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * fix: --chunk-size with selector returns missing result
  * Fixed winkernel proxy failing to query v1 endpoints created by dockershim CNIs
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * Update CHANGELOG/CHANGELOG-1.23.md for v1.23.8
  * apiserver: printers should use int64
  * add missing error handling steps
  * add missing error handling steps
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
  * Avoid updating Services with stale specs Fix the bug that service specs in servicesToUpdate may have been updated by clients.
- Require only BuildRequires: golang(API) = 1.17 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.17
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.23.17:
  * Release commit for Kubernetes v1.23.17
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0
  * add scale test for probes
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * egress_selector: prevent goroutines leak on connect() step.
  * tls.Dial() validates hostname, no need to do that manually
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Bump Konnectivity to v0.0.35
  * Improve vendor verification works for each staging repo
  * Update to go1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Match go1.17 defaults for SHA-1 and GC
  * update golangci-lint to 1.45.0
  * kubelet: make the image pull time more accurate in event
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * Add CVE-2021-25749 to CHANGELOG-1.23.md
  * Add CVE-2022-3294 to CHANGELOG-1.23.md
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * etcd: Updated to v3.5.5
  * Bump konnectivity network proxy to v0.0.33. Includes a couple bug fixes for better handling of dial failures. [Agent &amp; Server](https://github.com/kubernetes-sigs/apiserver-network-proxy/commits/v0.0.33) include numerous other fixes.
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Fixes kubelet log compression on Windows
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * update structured-merge-diff to 4.2.3
  * Add rate limiting when calling STS assume role API
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Split individual completions into separate packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- Security Patch Fix for CVE-2023-2431 (bsc#1212493)
  * added patch: fix-seccomp-localhost-error-handling.patch
  * this new kubelet component patch returns an error when a Pod or Container's SecurityContext has a localhost seccomp type but an empty localhostProfile field.</changelog>
</package>
<package pkgid="c53842c146f3afce8b72d2cfd6d54f175053b1a7d4723a816e98fcd934af8254" name="kubernetes1.24" arch="src">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="a9e070a191442c8126d7e6705e9a1615a8302fc964abf0d181e4801fa1ff523a" name="kubernetes1.24" arch="src">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="73914e228d5e43ad57ac22fa4fac1853e96e0b4b0ffa0da796eca498ff6615b9" name="kubernetes1.24-apiserver" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="63820809d3519d6c6f641a154041ac1f0e43ba1ba414a9bc39534b526981c1eb" name="kubernetes1.24-apiserver" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="44eb362d7aee522fff9776462990bf591db04f732c00f9d5b31bba4e41a4a951" name="kubernetes1.24-apiserver" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="41bb1a37ad8b82db6905e374d6223a041303e13add32c72ceeb90e8dcae8f362" name="kubernetes1.24-apiserver" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="3a47efe823628e6a0b9523bc9322258fcd4cdeddda68375c443dc1de1f45d443" name="kubernetes1.24-apiserver" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="bcbebef75d0dd1eaa975b9896dc349433b526e261a0b7c04480b53ffa8b004af" name="kubernetes1.24-apiserver" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="0e86a6afab9bf94274393f3d5a17afee09a0ddb99848758792520b472207af85" name="kubernetes1.24-apiserver" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="2db67db0cb1482bbbe302bf8ed587d711b85d6589719f77504639b46ddf4db22" name="kubernetes1.24-apiserver" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="063deef10ad2429055bb2df80801b7d0ecfb922b1ab0c0010773cd6b1ba3934b" name="kubernetes1.24-client" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="46bc325eaa4edf2cf3d88c0b2c155acda2589fa76c6ca00bc9cf8c02e415a424" name="kubernetes1.24-client" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="c88364123761c250c17873415123178185eb2d5dfd7bd36218bd2e1d768af613" name="kubernetes1.24-client" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="8ac60f3d3f4a1b23cd49ebe4900c3ab74b5eb98bcd96508468499c23be7959a4" name="kubernetes1.24-client" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="e28c2268ed42b7a3f7fcc2e28800cc021dc6427da44ab6bf94a7ab1e5bb1e522" name="kubernetes1.24-client" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="19c863a9f1dcc0a08c19b76b46df8e826992cf721e3e157e4412afc6bf303642" name="kubernetes1.24-client" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="749e6343377a8101d22644895e713961035db648183f0d3c982422ba426b5769" name="kubernetes1.24-client" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="4902b9872c59c53d4fac4265f94eadf4b4b1a17b4e28290828c1251f01423c83" name="kubernetes1.24-client" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="5eac5280a131a439aaf8c1b7fa8b21f4db5a53dca427983bec45ad05daf51558" name="kubernetes1.24-client-bash-completion" arch="noarch">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="10a6ded493fd267fa242b4c654c96497b7bf7956f5cc2209d3fb09897fd13e09" name="kubernetes1.24-client-bash-completion" arch="noarch">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="258fa9b7a75e2a0b105ebaa310ff3d3fc115b579b91b1034032950c5e317345e" name="kubernetes1.24-client-common" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="e37b7db3a9759bd8b49316a9bf7b11718f79b11869d3daea8f9255da29f5ba07" name="kubernetes1.24-client-common" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="dcd2bd8a7f9333c31dd47fc7dc137babe0f62bcc7f44c0c078d88bb14999d8a0" name="kubernetes1.24-client-common" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="7ebfe494afa1f49fa4af6abeb320f6c2ca8ebf26581560677832120e766c1b5e" name="kubernetes1.24-client-common" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="b017f35261e9b991b626f16522f40621901dd224fd4d8d0d4855c0f3612f76f0" name="kubernetes1.24-client-common" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="aaf3b8c8354f41c7dd631a5485a282d3d9c0987c8382938b5906b08a1a0af639" name="kubernetes1.24-client-common" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="d67c711fc01efb5cebd7337173e2ec8365a2f7605a3e478b9c831e189f0115b6" name="kubernetes1.24-client-common" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="2ae1ba4b8cd3666c1a8ce36cc739874645be5966a754b3a8dc0e0c11ab05192e" name="kubernetes1.24-client-common" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="e8918ba467d1dee3425e23ba2e6a571fd52e1eccdad3a6e617e609c7121441cd" name="kubernetes1.24-client-fish-completion" arch="noarch">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="241b37e4a9b22d654d6c74f208821d279279f2aeae07c4eba040fe246d7a02db" name="kubernetes1.24-client-fish-completion" arch="noarch">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="693695f090577d98d694eae948ab12ac6efa8acc567763f658bc8e12334bdc49" name="kubernetes1.24-controller-manager" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="e118e3caf15d9b5f81c246c58ed7319fbad737093247ff0a842926c22adbc4c5" name="kubernetes1.24-controller-manager" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="5481d00fba3b129e1ecb6ab23048efce00f18cf81143a52bb02a01ae345b8ee5" name="kubernetes1.24-controller-manager" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="6dc0b4364a1c408515fcd134e77ec4905cb827e5cbedd77b1270336cce8c92b2" name="kubernetes1.24-controller-manager" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="d39eb6a5181f5a2191a142523e6419669b9c2283101617065c35893b02604eb3" name="kubernetes1.24-controller-manager" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="f8902affd0f655269ab38835ea9d7911e574d449055bcbca8b349060f6f18b52" name="kubernetes1.24-controller-manager" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="4ddf69b8c8a1e7075ae28455a8d93857c8e46f586dc816cee873ec84ab6426e0" name="kubernetes1.24-controller-manager" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="beca33937de315a6b11ac8729f7e651658d49522d7363f34f9c8abc378c750d4" name="kubernetes1.24-controller-manager" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="318fb7c0e3935e5a3be27881c0b456f32e2c307e20c156e6a76f52615853cd75" name="kubernetes1.24-kubeadm" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="a24228526c3b933f1919ddc4b965361dad005e0ba30467637b7b719b81f81181" name="kubernetes1.24-kubeadm" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="08970864edbfdee88c94ee1fe14aad8cbd75cd98ab301c5bd067f7c7775be010" name="kubernetes1.24-kubeadm" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="3f17a8b57670891506dd43d5784d080fa9b0d9a68892fc7341dae80599bde2d9" name="kubernetes1.24-kubeadm" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="d663d24295e7f3fdd069c86fc1469d8700021b0c58fd1bdc1602d3d6e409f43a" name="kubernetes1.24-kubeadm" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="ccc602639d05ae33588e1e142dbb58270868ddb7ca8b6b006afb170888131a1b" name="kubernetes1.24-kubeadm" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="efd023c433299ad85ada25415b4f01ed7733ebb996136de0e1b9037a6be00917" name="kubernetes1.24-kubeadm" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="9228f57fdb5484c24bf54d383cf253a41b87ced5548c513996cb57cfe8878112" name="kubernetes1.24-kubeadm" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="49317022f0cff366eaa4fd3686c0b6ea179a041b51897058cd6e91c250ee8c32" name="kubernetes1.24-kubelet" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="149e1b9e30670510e4033f79a7c83f19c86df6f2f48c5ef9cc968c636fe13da0" name="kubernetes1.24-kubelet" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="417e756ab32ebd16f68c6f0782e34e5be212a092a5b741ee03d9a78a61967f01" name="kubernetes1.24-kubelet" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="fb48b89b2c5a2b73ee06db3d1c0501728872b2bfa3fd5fc388c1a63b2e5b3d61" name="kubernetes1.24-kubelet" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="557b99aefcd60ea96a186a65e05120125684cc773a943109bcb7bc7f0064c359" name="kubernetes1.24-kubelet" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="226c596f88d0a44a486b856988e9c11cff5aefdf9a61ab19dbd46d3575b56031" name="kubernetes1.24-kubelet" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="c94a4bd64f72aa4ba31358115951c80e3137839ca1709e93043825288a4b5a00" name="kubernetes1.24-kubelet" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="27f6f7660e9a69cb3c85e46d8439c48d1b24df94c02bc06a330a4577c1ce8288" name="kubernetes1.24-kubelet" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="fcd1f66dd2b3eb8e62a560a28446e7ee0e8b1781bf04fef6cd6a74c06350a802" name="kubernetes1.24-kubelet-common" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="c288d28d02a44c5bff92623be5b05c76af81c933c2538e1a87bf03bf663e8e91" name="kubernetes1.24-kubelet-common" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="c7064e38144bf90357430e3f82261f649765012b5179ee1d90f64f992501a9a3" name="kubernetes1.24-kubelet-common" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="b6166f40ce2d914b5ae5f73bd04b561fbc003bc0812d44d4143693f138910767" name="kubernetes1.24-kubelet-common" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="a059b58dce930fb2400fc0fe57d1348930f70ba17105ca5ae2167681834bffea" name="kubernetes1.24-kubelet-common" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="bd00bea36a5a54ce049c9c6cb6c9af41f20a7250313d567ce0c7aac7033a549e" name="kubernetes1.24-kubelet-common" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="7a9f1e126d865e53a5d898352e0454b866127d676f63ef24f398906ae4886c48" name="kubernetes1.24-kubelet-common" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="503a7e5720dcc4367fe9d5f04e1d6ad2bd8c499194b330ddc2a44a1a94d0811f" name="kubernetes1.24-kubelet-common" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="4ea6e92854a4bd4ef2ece8da038e7e0fda397e55bea85304bf58a4f1f5258a31" name="kubernetes1.24-proxy" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="804834e9f7a72b18afa3cfc285d0fe7cd877fd521d6635d5c3e5071e78f65c31" name="kubernetes1.24-proxy" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="abe0213c7d15dd686c80be17c491835125ddf9db0ac29d8573b02e58e73f2ac3" name="kubernetes1.24-proxy" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="034009c23ffc47dc7359dab184737c850dd0b2ec29bf483394400e0451bab223" name="kubernetes1.24-proxy" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="2281d040f3ba54167ba7f808436514c8c649a4d393c971158643f09c868eb5f8" name="kubernetes1.24-proxy" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="dcb8daf3d04d3d810de57ebec7d4afdeaf64bcc5dfa2872a4ffcfa7b850b035b" name="kubernetes1.24-proxy" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="5af9cccb35265b5cdfdb48bfa6601f717bda87642e250f145a2d31b377ca0784" name="kubernetes1.24-proxy" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="81fa7f8cdb118a5733dc34c0e6931b85c1004749cc334f78bc169a76e26cc368" name="kubernetes1.24-proxy" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="0780c212b41a08c4188bfae15ae3afaf7d5dbd8f8a624902cdb5d77e09b525bf" name="kubernetes1.24-scheduler" arch="aarch64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="e099a9c93131cd468c8efa57d4c0f95d3c9f7fd4f09e22eebdb76e351d44a5d9" name="kubernetes1.24-scheduler" arch="ppc64le">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="b99199645ac3492238620e63897eaa96ebf0a168204681f3f28d4b370eaecf17" name="kubernetes1.24-scheduler" arch="s390x">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="971fbffb4f423ec36fd5ab6566e05af0b2211718b6cd62d1522e1ac9b5821a9f" name="kubernetes1.24-scheduler" arch="x86_64">
  <version epoch="0" ver="1.24.13" rel="150500.3.3.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">- Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
</package>
<package pkgid="bad927cd4c58926d28361de0ea7cc9dc952eea9f0d440c0531485985a23099fd" name="kubernetes1.24-scheduler" arch="aarch64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="e86cb0eae31cceb09fadc452db196f80d7e02ed434d7047fb288bbdaa01f3235" name="kubernetes1.24-scheduler" arch="ppc64le">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="89ff8287554ee6993ec87e254f1120fd9aa8b23fcc5455acf934059b4b301ffa" name="kubernetes1.24-scheduler" arch="s390x">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="5ac8105d34ff67b3d39fc4542a38156c88382c5bc9fb82b8f0ca3bd6a66a3b6d" name="kubernetes1.24-scheduler" arch="x86_64">
  <version epoch="0" ver="1.24.15" rel="150500.3.7.1"/>
  <changelog author="jkowalczyk@suse.com" date="1651752000">- Initial package</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655812800">- Update to version 1.24.1:
  * kubeadm: remove checking legacy taint for kubeadm-kinder-latest-on-1-24
  * Fix requests scope classification
  * Update Go to 1.18.2
  * Integration test for openapi scale &amp; status
  * Remove warning log for merging meta and scale type
  * authn: fix cache mutation by AuthenticatedGroupAdder
  * GCE: skip updating and deleting external loadbalancers if service is managed outside of service controller
  * Wait for cache to sync in job's TestWatchOrphanPods
  * Fix ServiceIPStaticSubrange assigns duplicate IP addresses
  * Fix OpenAPI loading error caused by empty APIService
  * kubeadm: only taint CP nodes when the legacy "master" taint is present
  * Test Foreground deletion in job integration
  * Fix removing finalizer from finished jobs
  * Don't mark job as failed until expectations are satisfied
  * Integration test for backoff limit and finalizers
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.0
  * Do not wrap lines if we can't read term size</changelog>
  <changelog author="jkowalczyk@suse.com" date="1655899200">- Update to version 1.24.2:
  * move the ignore logic higher up to the reconciler
  * Ignore EndpointSlices that are already marked for deletion
  * test: update graceful node shutdown e2e with watch
  * kubelet: Mark ready condition as false explicitly for terminal pods
  * agnhost: bump version 2.39
  * Update Go to 1.18.3
  * add service e2e tests
  * kubelet: add e2e test to verify probe readiness
  * kubelet: only shutdown probes for pods that are terminated
  * kubelet: Pod probes should be handled by pod worker
  * cpu manager policy set to none, no one remove container id from container map, lead memory leak
  * fix audit union loop variables in closures
  * Updating e2e test to check EndpointSlices and Endpoints as well
  * e2e: services with evicted pods doesn't have endpoints
  * e2e test for evicted pods
  * endpoints controller: don't consider terminal endpoints
  * endpointslices: terminal pods doesn't receive enpoints
  * add pod util to verify pod is terminal
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.1
  * Add test for checking ephemeral volume expansion
  * Fix resizing of ephemeral volumes
  * Winkernel proxier cache HNS data to improve syncProxyRules performance
  * GCE Windows: Copy the CNI binaries from the right folder</changelog>
  <changelog author="jkowalczyk@suse.com" date="1658232000">- Update to version 1.24.3:
  * Do not skip job requeue in conflict error
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * endpointslices: node missing on Pod scenario
  * fix metrics for placeholder slice
  * fix a bug on endpointslices tests comparing the wrong metrics
  * kubeadm: fix the bug that configurable KubernetesVersion not respected during kubeadm join
  * GIT-110239: fix activeDeadlineSeconds enforcement bug
  * kubeadm: handle dup unix:// prefix in node annotaiton
  * fix: --chunk-size with selector returns missing result
  * Fix unnecessary recreation of placeholder EndpointSlice
  * kubeadm: fix error adding extra prefix unix://
  * e2e: add storage capability for offline volume expansion
  * add missing error handling steps
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.2
  * apiserver: printers should use int64
  * fix image pulling failure when IMDS is unavailalbe in kubelet startup
  * e2e: ensure single image for populator containers
  * fix: exclude non-ready nodes and deleted nodes from azure load balancers
- Require only BuildRequires: golang(API) = 1.18 pinned Go major version.
  Remove potentially conflicting BuildRequires: go &gt;= x.y.z.
  The plan for future updates is BuildRequires: golang(API) &gt;= 1.18
  minimum Go major version.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758400">- Update to version 1.24.11:
  * Release commit for Kubernetes v1.24.11
  * releng: Update images, dependencies and version to Go 1.19.6
  * Update golang.org/x/net to v0.7.0
  * Pin golang.org/x/net to v0.4.0 in 1.24
  * kubelet/client: collapse transport wiring onto standard approach
  * apiserver: remove 34s from DELETECOLLECTION rest handler
  * update prev succeeded indexes for indexed jobs unconditionally
  * use custom dialer for http probes
  * use custom dialer for tcp probes
  * add custom dialer optimized for probes
  * bump honnef.co/go/tools to support go1.20
  * Fix issue that Audit Server could not correctly encode DeleteOption
  * Do not include scheduler name in the preemption event message
  * Do not leak cross namespace pod metadata in preemption events
  * pkg/controller/job: re-honor exponential backoff
  * releng: Update images, dependencies and version to Go 1.19.5
  * Explicitly call rand.Seed() method
  * Improve vendor verification works for each staging repo
  * Bump Konnectivity to v0.0.35
  * Add pod to dsw if termination is not completed during reconstruction #issues/113979
  * integration: migrate taint tests
  * integration: migrate scoring tests
  * integration: migrate preemption tests
  * integration: migrate plugings tests
  * integration: migrate extender tests
  * integration: scheduler: migrate PDB from v1beta1 to v1
  * Fix issues in volumesnapshot test for ephemeral storage
  * update golangci-lint for go 1.19
  * golang: Update to 1.19
  * Adjust for os/exec changes in 1.19
  * Update golangci-lint to 1.46.2 and fix errors
  * Windows Kube-Proxy implementation for internal traffic policy.
  * Fix a regression that scheduler always go through all Filter plugins
  * Fix SPDY proxy authentication with special chars
  * Creating Ingress IP loadbalancer alone when all the endpoints are terminating. KEP1669
  * change k8s.gcr.io/pause to registry.k8s.io/pause
  * Update golang.org/x/net 1e63c2f
  * image pull event include duration with waiting
  * kubelet: make the image pull time more accurate in event
  * update structured-merge-diff to 4.2.3
  * regression test for exponential recursion bug on CRDs
  * Fix endpoint reconciler failing to delete masterlease
  * kubeadm: remove v1.25 etcd "3.5.6-0" for v1.24
  * use etcd 3.5.6-0 after promotion
  * changelog: CVE-2022-3294 and CVE-2022-3162 were fixed in v1.23.14
  * upgrade system-validators to v1.8.0 for a bugfix of cgroupv2 io check
  * Introducing LoadbalancerPortMapping flags for VipExternalIP
  * egress_selector: prevent goroutines leak on connect() step.
  * Merge pull request #113133 from sxllwx:automated-cherry-pick-of-#113133-upstream-release-1.25
  * Fixed (CVE-2022-27664) Bump golang.org/x/net to v0.1.1-0.20221027164007-c63010009c80
  * Add CVE-2022-3162 to CHANGELOG-1.24.md
  * tls.Dial() validates hostname, no need to do that manually
  * e2e: use custom timeouts in GetSnapshotContentFromSnapshot()
  * test/e2e/storage: replace hardcoded value with custom timeout in cleanup routine
  * StatefulSet: Cleanup the complex defer function updating the status
  * Be sure to update the status of StatefulSet even if the new replica creation fails
  * added retries to winkernel proxy rules deletion
  * added backend hashing to winkernel proxier
  * kubelet: fix pod log line corruption when using timestamps and long lines
  * kubeadm: mutate ClusterConfiguration.imageRepository to "registry.k8s.io"
  * kubeadm: use registry.k8s.io instead of k8s.gcr.io
  * add GetAllocatableCPUs test in cpumanager
  * fix GetAllocatableCPUs in cpumanager
  * e2e: restore volume lifecycle checks for csi-hostpath driver
  * kubelet: fix volume reconstruction for CSI ephemeral volumes
  * NodeLifecycleController: Remove race condition
  * kube-proxy wait for cluster cidr skip delete events
  * kube-proxy handle node PodCIDR changs
  * kube-proxy: gate topology correctly
  * service update event should be triggered when appProtocol in port is changed.
  * filter out terminated containers in cadvisor_stats_provider
  * Fix winkernel proxier setting the wrong HNS loadbalancer ID for ingress IP
  * Bump konnectivity-client to v0.0.33
  * Fix list estimator for lists that are executed as gets
  * kubeadm: allow RSA and ECDSA format keys in preflight check
  * Limit redirect proxy handling to redirected responses
  * Make sure auto-mounted subpath mount source is already mounted
  * Call SetupDevice only if Volume is not globally Mounted
  * Fixes kubelet log compression on Windows
  * Add zone field to vsphere test cloudconfig
  * Reduce default gzip compression level from 4 to 1 in apiserver
  * exec auth: support TLS config caching
  * Add an option for aggregator
  * Update go-runner to v2.3.1-go1.18.6-bullseye.0
  * Update kube-cross image to v1.24.0-go1.18.6-bullseye.0
  * Fix problem in updating VolumeAttached in node status
  * Call queueSet::boundNextDispatchLocked enough
  * Always log APF InitialSeats and FinalSeats values
  * Marshal MicroTime to json and proto at the same precision
  * Windows: ensure runAsNonRoot does case-insensitive comparison on user name
  * Tolerate sub-microsecond eventTime changes on update
  * Improve kubectl display of invalid errors
  * fix unmatch reason when updating pod status
  * fix nestedPendingOperations mount and umount parallel bug
  * client-go/rest: check if url is nil to prevent nil pointer dereference
  * Revert "client-go: remove no longer used finalURLTemplate"
  * Skip "instance not found" error for LB backend address pools
  * Update cel-go to v0.10.2.
  * fix a memory leak problem when calling DryRunPreemption
  * Fix JobTrackingWithFinalizers when a pod succeeds after the job fails
  * Use CheckAndMarkAsUncertainViaReconstruction for uncertain volumes
  * Remove volume from found during reconstruction if mounted
  * Add unit test for verifying if processReconstructedVolumes works as expected
  * Fix code to process volumes which were skipped during reconstruction
  * Keep track of each pod that uses a volume during reconstruction
  * allow namespace admins to use leases to encourage migration off of configmaps
  * Fix: filter out unsatisfied nodes when calling AddPod in PodTopologySpread
  * Fix `kubeadm upgrade plan` issue with FQDN nodes names
  * Add rate limiting when calling STS assume role API
  * Fix kubelet panic when accessing metrics/resource endpoint
  * Fixing issue in generatePodSandboxWindowsConfig for hostProcess containers by where pod sandbox won't have HostProcess bit set if pod does not have a security context but containers specify HostProcess.
  * Add retry logic for Unix Domain sockets on Windows
  * Execute the Run function of kubelet, no log output after failure
  * Prune defaults for CRD serving</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1677758401">- update patch files to reflect upstream registry changes from k8s.gcr.io to registry.k8s.io
  * kubeadm-opensuse-registry.patch
  * revert-coredns-image-renaming.patch</changelog>
  <changelog author="rombert@apache.org" date="1678363200">- Use upstream fish completions and obsolete external package</changelog>
  <changelog author="rombert@apache.org" date="1678881600">-  Split individual completions into separate packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1679400000">- Update to version 1.24.12:
  * Release commit for Kubernetes v1.24.12
  * One lock among PodNominator and SchedulingQueue
  * releng/go: Update images, dependencies and version to Go 1.19.7
  * Fix for windows kube-proxy: 'externalTrafficPolicy: Local' results in no clusterIP entry in windows node.
  * Re-enable label selector
  * Add integration test for diff --prune --selector
  * Use label selector for filtering out resources when pruning. Matches same behavior as for kubectl apply
  * scheduler/framework/plugins/volumebinding: fix inaccurate log for when a volume is bound to a claim
  * Remove check for CSI driver running on node for CSI migration attach operations
  * Simplify construction of /metrics request
  * Move CSI json file saving to SetUpAt()
  * Fix for issue with Loadbalancer policy creation for IPV6 endpoints in Dualstack mode.
  * Invoke gimme from kube::golang::verify_go_version
  * Defer builds to test-cmd and test-integration targets
  * Carefully compute request path for metrics</changelog>
  <changelog author="rombert@apache.org" date="1679918400">- Add proper obsoletes for completion packages</changelog>
  <changelog author="rombert@apache.org" date="1679918401">- Stronger conflicts for completion packages</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681300800">- add kubernetes1.18-client-common as conflicts with kubernetes-client-bash-completion</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1681387200">- Update to version 1.24.13:
  * Release commit for Kubernetes v1.24.13
  * releng/go: Update images, dependencies and version to Go 1.19.8
  * wait again on pending state
  * cacher allow context cancellation if not ready
  * Drop development dependencies from test targets
  * apiserver cacher: don't accept requests if stopped
  * Clear front proxy headers after authentication is complete
  * Make prerelease tag optional in CI versions
  * Annotate CI version regexes
  * Drop unused regex grouping
  * Delete unused version regex function
  * kubelet: Fix fs quota monitoring on volumes
  * fsquota: only generate pod uuid is nil
  * Change where transformers are called.
  * Route controller should update routes with NodeIP changed When a node reboots or kubelet restarts, it is possible that its IP is changed. In this case, node route should be updated with the correct IP. In this PR, it checks if the IP in an existing route is the same as the actual one. If not, it marks it as "update" so the old route will be deleted and a new one will be created. There's a new field EnableNodeAddresses, which is a feature gate for specific cloud providers to enable after they update their cloud provider code for CreateRoute().
  * client-go/cache: update Replace comment to be more clear
  * client-go/cache: rewrite Replace to check queue first
  * client-go/cache: merge ReplaceMakesDeletionsForObjectsInQueue tests
  * client-go/cache: fix missing delete event on replace without knownObjects
  * client-go/cache: fix missing delete event on replace
  * Bump konnectivity-client to v0.0.36
  * test: demote service ClientIP affinity timeout tests from conformance</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1682596800">- Update `Requires` in the "kubernetes1.24-client" pkg to:
  * Requires: kubernetes%{baseversion}-client-common
- Remove following `Obsoletes` from the "kubernetes1.24-client-common" pkg:
  * Obsoletes: kubernetes%{baseversionminus1}-client-common</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686225600">Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
  * added patch: kube-apiserver-admission-plugin-policy.patch
  * this new kube-apiserver component patch prevents ephemeral containers:
  * * from using an image that is restricted by ImagePolicyWebhook (CVE-2023-2727)
  * * from bypassing the mountable secrets policy enforced by the ServiceAccount admission plugin (CVE-2023-2728)</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686571200">- Update BuildRequires:  `go &gt;= 1.19.9`
- Update to version 1.24.14:
  * Release commit for Kubernetes v1.24.14
  * [1.24] vendor: bump runc to 1.1.6
  * benchmark test to evaluate the overhead of podMatchesScopeFunc
  * Fix incorrect calculation for ResourceQuota with PriorityClass as its scope
  * releng/go: Update images, dependencies and version to Go 1.19.9
  * Fix directory mismatch for `volume.SetVolumeOwnership()`
  * use case-insensitive header keys for http probes
  * add log includes pod preemption details
  * fix: the volume is not detached after the pod and PVC objects are deleted
  * Bump konnectivity-client to 0.0.37
  * Do not look at VPC-related resources outside the cluster's network
  * kubelet: Do not mutate pods in the pod manager
  * Logging, remove LookPath in detectSafeNotMountedBehavior
  * Take canSafelySkipMountPointCheck package-private, reduce log visibility for removePath.
  * Add test for detectSafeNotMountedBehavior.
  * Add test for CanSafelySkipMountPointCheck
  * Correct detection of 'not mounted' behavior -- umount will exit with a non-zero code.
  * Skip mount point checks when possible during mount cleanup.
  * Return error for localhost seccomp type with no localhost profile defined</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1686830400">- v1.24.15 includes Security Patch Fix for CVE-2023-2727 (bsc#1211630) and CVE-2023-2728 (bsc#1211631)
- Update: `BuildRequires:  go &gt;= 1.19.10`
- Update to version 1.24.15:
  * Release commit for Kubernetes v1.24.15
  * update-vendor: update vendored go.sums
  * [release-1.24] releng/go: Update images, deps and ver to go 1.19.10
  * kube-proxy avoid race condition using LocalModeNodeCIDR
  * Add ephemeralcontainer to imagepolicy securityaccount admission plugin
  * Switch to assert.ErrorEquals from assert.Equal to check error equality
  * kubeadm: Make etcd member removal idempotent
  * kubeadm: Add etcd client unit tests
  * kubeadm: Use internal etcd client through an interface
  * update webhook test to go 1.21
  * Test APIService safe handling at startup
  * Fix waiting for CRD sync at server start
  * kubeadm: fix a bug where the static pod changes detection logic is inconsistent with kubelet
  * Update CHANGELOG/CHANGELOG-1.24.md for v1.24.14
  * vclib: Modify x509.UnknownAuthorityError unwrap check
  * vsphere: Adapt to govmomi version bumps
  * *: Bump version of vmware/govmomi</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1687262400">- remove: kube-apiserver-admission-plugin-policy.patch
  * patch included upstream in the v1.24.15 patch version release
- remove: kubernetes1.24.13.obscpio</changelog>
</package>
<package pkgid="dd458da78c6c2e68a3fce7c2e33c008b57733dac18d699d9992727d6dd035dea" name="libMagick++-7_Q16HDRI5-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="e149db32e0eb6c2bb431be940a10f353a12e3d8794c7508d8b19c9d2d012e165" name="libMagick++-7_Q16HDRI5" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="7e12089e016a88c05bd78f10bdb3a69c5e9447f653ec413ed71e1e524deb450a" name="libMagick++-7_Q16HDRI5" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="ddeec1e01e941bb05b6169ff36dc806f98060aa7d9da34053321dac20851a55d" name="libMagick++-7_Q16HDRI5" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="1a9b3036e884c7588c722c16a60faea14abf4dfc36179e35f76345a7fd1f6204" name="libMagick++-7_Q16HDRI5" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="1fcd94ee3979c6b17b2b713b0eaa04ecebff9b0497300c2887a0873352d25e00" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="21059ef656da9d2c95a154128c22dd3bc94df45749fb10876b07456196254a04" name="libMagick++-devel" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="430a6d308fd0cd1ec496b3ff54bdc1f4bd90d5f7d14c4ccec2567a2e786a042c" name="libMagick++-devel" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="f7e46a5b88885e5caaf5e2a9a63ca523fb34a5360856a07fd2bc5c8b9b16bd93" name="libMagick++-devel" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="d200cbfce851364ef81b9caa105f9e6c84ed133150a0e776189c022c266fecea" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="97f13f432bb058e6f08ca0cbf5b76765d7800a599334d6f0bf096eb1f8b888cc" name="libMagickCore-7_Q16HDRI10-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="30ef2873c045e3e842a4bb035e9790c47cd35e1d6dae8cb249d4a5bcc9589c2b" name="libMagickCore-7_Q16HDRI10" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="abec5aced902483ea0209de2ccca791204c50fd39c987709be60691d72d676ff" name="libMagickCore-7_Q16HDRI10" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="cf3d7d282e8dad480c1c23e50593711cd13e0eedf787746883e65495670c701f" name="libMagickCore-7_Q16HDRI10" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="11666286483a63e53770aa4e972937a21593d53f86ffc85a4d7a523e964605a0" name="libMagickCore-7_Q16HDRI10" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="67a4bd0d63339487809ba50a8ba12f772fd55d809f8cab0a8199e1cdbf889b49" name="libMagickWand-7_Q16HDRI10-32bit" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="8aa3e03ebad5ba182081271a977b3ea0f8a5ef11fc44fc8c20b4927b67749ace" name="libMagickWand-7_Q16HDRI10" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="d13bd16c9c88dd77da68ca457f8a886fcafb176561773f4086a0b59db340d7e5" name="libMagickWand-7_Q16HDRI10" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="24065d1dc459690df286685bc2236cc9cb114d8863db3ea98303153a73a164cb" name="libMagickWand-7_Q16HDRI10" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="39986f6544f5e546dd07a4a804a1b1cb8a2765b623b96f7962f0fb11230bb5d0" name="libMagickWand-7_Q16HDRI10" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="9da09ff560ad7dcc61ed680a7f84f0f568e86ed75770c79f344cc5ae55c985dd" name="libQt6Concurrent6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="1c59b2e03431edaf6a14cb749bf65b1c97dc0bc439507affe6480e3bd719ef51" name="libQt6Concurrent6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="3b61b940e037169318fd23d58489c0fc8783796fcedb5587a1b52e98ffe7fef7" name="libQt6Concurrent6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="02c97e4afc943e922233a96322bec956cf17b3bd27729e7ff97d2c08fdaf9544" name="libQt6Concurrent6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="fa642cbf6ecbe74008b1a6b6fae7c6ed07a7e238e0f2926307808728a1854308" name="libQt6Core6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="559a6b5c0613cb1145d0bf4639933a922870bfa30983aac6234ea03ea56f1eb5" name="libQt6Core6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="71189feb530d90d85e93bdde24c2e21bc578f65c7ba553396d8fd966e01b9352" name="libQt6Core6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="cde4cb93a4a049bc7d21af2bd172f997efa8334c3b178588d541276ca7425660" name="libQt6Core6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="2504b9952fd5ccc9ad9d1a8aec756d56e2a8a676b19c8d46f333e95851ff1710" name="libQt6DBus6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="ec8f14c288fd5f97a30b84a711441248a9ba3375548148797f0557d141dc5e6f" name="libQt6DBus6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="549da3191bb6594671dae6b83e5c06cbe728a1cdfdc399979e277702f376b87b" name="libQt6DBus6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="b888ca04e22c5b2a653ce1e03ebc9e1ccd75ccdc9549101de309e2f0d28f14be" name="libQt6DBus6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="f66530e9772307da84343a41400f354fef073adcf7816ca0adcb9053e42c90a5" name="libQt6Gui6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="d5aa3cca8ce970882e473996026351d33132d82e1f2294bc40a2a57f3d2ae32d" name="libQt6Gui6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="4558a72b67e5f4b7005eae870c71cf3698b5e627920c59bf9905bd952d951204" name="libQt6Gui6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="9f3297ba65bfb75eefc91c7df5d8bb03aa057e436b7960d6e21acf69b98230cb" name="libQt6Gui6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="e94d82c8a242e3e54d449dbf89ed0d2987f704d86cb20c7f92ae909cc4d422ed" name="libQt6Network6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="08e20b114395a8e461dc6eef10b464029e044be824d67f81b0e0ab108761ab6d" name="libQt6Network6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="c137e54573a270bf2670464c2c70898305cfc80476b19f51a6b29185a4dcadc1" name="libQt6Network6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="b6c303cb98c0107174d13475b0ddd3fdb93cc92bce6977789f953ce305b5cb31" name="libQt6Network6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="5871ff4b64542f67817b5e535d96fa977c838671ca5c37f22f77432fadb9d05f" name="libQt6OpenGL6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="2d3656fc30feae9e4c5dd84280b80ca71eebe0b91805501b66074bb82c065672" name="libQt6OpenGL6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="a4ce77e7ab59544dc6bf5b51257ab2caae833fd91fecff5fe633158567dc4abc" name="libQt6OpenGL6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="6cfe4a42f64cd47f516a777f8e2422bdf60dd09cece714bdf4b3b7257adb852b" name="libQt6OpenGL6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="a744f257867532bb05bdaf900e68c8823f55c564a83e262dc70318d576ff2268" name="libQt6OpenGLWidgets6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="2367e92fca250302e064311daacf0a128f44455ef8768fefc8ecfc1404187bf9" name="libQt6OpenGLWidgets6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="ab7f7b88e28dd82b0b037862836e18f34a1dc85a18e87c01c39b559eefb752c8" name="libQt6OpenGLWidgets6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="9c94124934674f0e883399b8ceb71a2ec8d574b70dc65dec156dea86e0f811d0" name="libQt6OpenGLWidgets6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="cced56f546686830d150a76ade773f015a00941cc8391cc3874ddd1d9cb125ed" name="libQt6PrintSupport6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="1dd9afff53032cab6e6a6e5702ee8375bbdb96af482ca4ac040b76645df2df99" name="libQt6PrintSupport6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="9bd7f58b7283cbe94544df756ddb1d2a940a5dba358d8b96f93d72e6b1da68d4" name="libQt6PrintSupport6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="9e68ab9dc1840d0acfb43be6ef441d632e136d3f9f82b2cbb78ed087b606497d" name="libQt6PrintSupport6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="83400b12267be05dec7a045b16e6c3f93d586dd031a00da1a35bbe8834668ece" name="libQt6Sql6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="929a98e423c1cadcd79a847e8815f5ba6f2df21bdce5c92b78888e773a8fe3ee" name="libQt6Sql6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="fc712576e6f3aad2f2bea9272e7cdfeaf177c74e48ce9d47583ba19589b65c2d" name="libQt6Sql6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="62bf5fb3ffb24aa8d169236d7aa99a218e73e9cd17596b4305e5673452388520" name="libQt6Sql6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="65088169bc718232fff053802a14007e417a1cca2f2ea6f2e64165e49bfed991" name="libQt6Test6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="2b475a71811d655f2955ff25640454b532214ea1742d87b55546fbe209ee95d3" name="libQt6Test6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="29e79d310c5cb480f8f573c4e5e6be26562e01b858fa9cac56ad1a456fecd216" name="libQt6Test6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="749cf0188713746092d23e442bf02eca1e0e9e6772e7b45b4ec640c736a6b338" name="libQt6Test6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="0caea3355558d6e2a2f5ea7562afec4b8d7be5540f456ff4b4e0548c8e54577c" name="libQt6Widgets6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="1d479b01ac5db8a634bbd8fcb9d3b0e50043b8ef748db73becb44c909624a38c" name="libQt6Widgets6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="49daf2b20d4be0e981848b0d3d273ab66d516a5e1d44f39497315b1df7056c60" name="libQt6Widgets6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="b89686ba3c7fb81e1fb4b8aab184a7b992e1065aa52998943371258289bafc67" name="libQt6Widgets6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="e9ce32653292a1c5892bdf5f8a48c9e5207633f4a739b328d1e7009706280f05" name="libQt6Xml6" arch="aarch64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="104e27463ce91e65690c1b9af8fdb8f16194e6488d149f607eae3a99905df98e" name="libQt6Xml6" arch="ppc64le">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="354b85d7368e46961aec1d7c9ed61614deaf700d26c48650a6afbad5c5e7a6b7" name="libQt6Xml6" arch="s390x">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="b6a0ccc8410661336a67501643fbd838fa361b2cb3deff914b5079cf0d3ab35b" name="libQt6Xml6" arch="x86_64">
  <version epoch="0" ver="6.4.2" rel="150500.3.3.1"/>
  <changelog author="christophe@krop.fr" date="1633003200">- Update to 6.2.0:
  * https://www.qt.io/blog/qt-6.2-lts-released</changelog>
  <changelog author="christophe@krop.fr" date="1635249600">- Update to 6.2.1
  * https://www.qt.io/blog/qt-6.2.1-released</changelog>
  <changelog author="jonaski@opensuse.org" date="1636027200">- Add patch for critical performance regression in qscrollarea
  * 0001-qscrollarea-performance-fix.patch</changelog>
  <changelog author="christophe@krop.fr" date="1638360000">- Update to 6.2.2
  * https://www.qt.io/blog/qt-6.2.2-released
- Make sure all dependencies are present when installing devel
  packages. Qt &gt;= 6.2.2 is much less permissive.
- Drop 0001-qscrollarea-performance-fix.patch. Merged upstream.</changelog>
  <changelog author="alarrosa@suse.com" date="1640174400">- Increase the memory constraint to fix a oom failure</changelog>
  <changelog author="christophe@krop.fr" date="1643630400">- Update to 6.2.3:
  * https://www.qt.io/blog/qt-6.2.3-released</changelog>
  <changelog author="christophe@krop.fr" date="1646222400">- Add upstream change (boo#1196501, CVE-2022-25255):
  * 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
- Install qt6-core-private-devel when installing qt6-core-devel
  (boo#1195368)</changelog>
  <changelog author="christophe@krop.fr" date="1647864000">- Update to 6.2.4
  * https://www.qt.io/blog/qt-6.2.4-released
- Drop 0001-QProcess-Unix-ensure-we-don-t-accidentally-execute-s.patch
  Merged upstream.</changelog>
  <changelog author="christophe@krop.fr" date="1648555200">- Update to 6.3.0-rc
- Add patch:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
- Update build constraints</changelog>
  <changelog author="christophe@krop.fr" date="1649419200">- Update to 6.3.0:
  * https://www.qt.io/blog/qt-6.3-released</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1651579200">- Require the SSL devel package it was built with, not just any
  pkgconfig(openssl). Otherwise it is satisfied with libressl-devel
  even if it was built with openssl-devel.</changelog>
  <changelog author="christophe@krop.fr" date="1652184000">- Add GCC 12 compatibility changes:
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1655467200">- Update to 6.3.1:
  * https://www.qt.io/blog/qt-6.3.1-released
- Drop patches, now upstream:
  * 0001-CMake-Don-t-hardcode-the-library-directory-name.patch
  * 0001-XCB-fix-GCC-12-warning-about-uninitialized-variable-.patch
  * 0001-Fix-build-with-GCC12-avoid-QCborStreamReader-prepars.patch
  * 0001-QtOpenGL-Fix-build-with-GCC-12-qt_imageForBrush-is-i.patch</changelog>
  <changelog author="christophe@krop.fr" date="1662724800">- Update to 6.3.2:
  * https://www.qt.io/blog/qt-6.3.2-released</changelog>
  <changelog author="christophe@krop.fr" date="1663329600">- Update to 6.4.0 RC</changelog>
  <changelog author="christophe@krop.fr" date="1664452800">- Update to 6.4.0:
  * https://www.qt.io/blog/qt-6.4-released</changelog>
  <changelog author="christophe@krop.fr" date="1665921600">- Make sure the QPA and wayland-related plugins are installed if
  needed</changelog>
  <changelog author="christophe@krop.fr" date="1668513600">- Update to 6.4.1:
  * https://www.qt.io/blog/qt-6.4.1-released</changelog>
  <changelog author="christophe@krop.fr" date="1673006400">- Update to 6.4.2:
  * https://www.qt.io/blog/qt-6.4.2-released</changelog>
  <changelog author="alarrosa@suse.com" date="1687953600">- Add patch from upstream to fix an overflow in QTextLayout
  (CVE-2023-32763, QTBUG-113337, bsc#1211798) and two other patches
  from upstream so it applies correctly. These patches fix
  QTextLayout's maximumWidth() for a text containing spaces
  (QTBUG-106947) and a text containing a line separator
  (QTBUG-89557, QTBUG-104986):
  * 0001-QTextLayout-fix-maximumWidth-for-a-text-containing-spaces.patch
  * 0002-QTextLayout-fix-maximumWidth-for-a-text-containing-line.patch
  * 0003-CVE-2023-32763-Fix-specific-overflow-in-qtextlayout.patch</changelog>
</package>
<package pkgid="cbd4e69beb882ff159f8fad9cf059867d1c2ec2b0b24e1256f3a87efc4577d3e" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="690a3e681f79655cf744d14764ea77535809d16ece0adc2d24be510c8f5a2261" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="4ca3cf9a034e63f7f17079c684cfd64ef75b2153cc54ab32a86ae59a890569c3" name="libX11-6" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="0271cc8e459dbfa967e74677d52d3981c8061ca9292136096d65e1620c42786d" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="e7bac92becdd0e7e216a9072c0e11f60896b7dfdbf181875692a38c95aed3d97" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="2097d70de42cffeeaee5b10ac7759f359919d614913b3b1f206385a174512fbe" name="libX11-6-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="647933eb6c6d422bfec9cce60bbde83348a0d0da8d68f2e34325a54179e466f2" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="8fba6d0f89949c0b862f2fea031bad5f44fc4cbf2f6ac0b09b7fb50c40725b61" name="libX11-devel" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="5f06aa9d974aec34d9a88a6c4269e856013ae44a729721224091f26bbbdc4ad2" name="libX11-devel" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="e306660c8cd02eb0faa644c10f7264dfff0a80f4969174c88f73ef44468acebe" name="libX11-devel" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="256e3246698485a8593e763dda6484de8c0ce8a2c51d1e828f3d0b8663e5093e" name="libX11-devel" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="fe9effa368596418fcdc47acd4b8bdb6047a527c0b9ebb9459ed852b5a12b9bd" name="libX11-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="53866c62f3d61fc27d2689f113a22897fd57144d7c8f73e8693bf60f88d90217" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="2b5127f3f29507dd05f5ebd924c485af0cf4e3e2b4f8f74e85c30e9f62225679" name="libX11-xcb1" arch="ppc64le">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="24488c0333ce7b6b562b1034be7d0cc82b92bd4d96ba77cb85ec1bf84d99dae0" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="a6b0cf8ee8446f3c3268afff527f390837669f126c8f108991ce3daac1bb67f8" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="021918a907cc8f9847d01e6c3116254a9a44cf55b2823066243fa8b97fb4a076" name="libX11-xcb1-32bit" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="d43288ec2b6317803a2e98b902397ca42f3f5b4ebb5aac20cf1279cddc63494c" name="libada12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a8c180660baec529d30e6f3051c21c8480eafc64b744fb68a274b533e16a49cc" name="libada12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a8a91b9522e7b02693bf6147ee3f3c99b517dd67a7aa0406632f041f417b64cd" name="libada12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4590a9c936ce0ccbcb245954b79081dcb83e1582f5925f44c7e1c32637390764" name="libada12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dcab460f8dd9ae2c58cf7dfc7058e3b8458ab743e1fa0aa742e6041e40b31164" name="libada12-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="661e4e86fe78d25add195ce8c86d10c25c1811704159da7a35522ca4faec078a" name="libada12-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a2cb5e822b32dc9eeaf177b9e7d35d3a5c18c93178e408db2230864e89db221b" name="libasan8" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0da13c2877bf64acde3932ea269cabd2ae040da2769b3f864857cc709feab505" name="libasan8" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1443ef2be8a597f9c50c56a66bb19f8a5be05a6023254b58efaa3d36b14ec5b5" name="libasan8" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="0a1d090f851d1a2945b43f64c1b900ecbc05f213281904f3ab9328a50eacb5bb" name="libasan8" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cbf3a776229fc8d3e35409e6d541de77864ee5923be3cc6c5592aceda7ad587a" name="libasan8-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2f784adc25400aae0f650521cacdf1f95f325eb6e2f646988714fe29913d4278" name="libasan8-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9cb84fc53065d7c95c82f68997c66d625b53e58972fbad1bd6092e0d8a228a7b" name="libatomic1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a708ec4b3394809acca17d1d53d432a69b4bb828568a340d3865d085ebefb193" name="libatomic1" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="05ef192d23ed5c6f30126ac40e75e170812f0f3c46751203d5fd9589f9587683" name="libatomic1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="36a99ffbd474cd8a6a71d9c9d275cd3301128c0c9ff13b9d5ae56cad246fc2e6" name="libatomic1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5313abe9cf49ec415645180523cc2f4f77e7912b9753391cf7d2d2ff8d4442fd" name="libatomic1-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="eb7a5112822bca1e74860758fb4d47313c791e31409ae25d86e0ca4d4139d4f4" name="libatomic1-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cd099664409df630baac3990bf0e9176dc7127c939ae55c9673970fbe004ea78" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="ef7f85e6b0ab7dfbf16a2e33c80ff0dec87485036408e4a3a4aca02c6e7b3882" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="fb01964eac97d2a46100f24b2c9808278fbf9ef5e55d18518a2a183972cc761d" name="libbluetooth3" arch="ppc64le">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="2bf1639ca071908bff054388dff863a98909872ccee1595c1ded94de9738f86e" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5e6942638a99dd65b9d74ee5eb5dcfeb0b120878c87a556d452fdb98e56e0959" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.65" rel="150500.3.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1625745600">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- remove bluez-5.59-0388794dc5fdb73a4ea.diff (included upstream)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1626091200">- remove notification message from bluez-deprecated package.
  I'm not going to remove it, and another maintainer can still
  restart the removal process :-)
  also boo#1188660</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1627905600">- fix bluez-auto-enable-devices subpackage (boo#1177845)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1628596800">- add fedora's patches 0002-Use-g_memdup2-everywhere.patch and
  0005-media-rename-local-function-conflicting-with-pause-2.patch
  to fix compatibility problems with newer glib and glibc</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1629806400">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1634472000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- drop obsoleted patch
  0005-media-rename-local-function-conflicting-with-pause-2.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637668800">- Stop nuking the obex service, we support user systemd services
  just fine now. Following this, no longer hack the dbus service,
  leave it as a systemd service as upstream intended.
- Split out obex in own package with it's needed enabledment as a
  systemd user service.
- Add 0001-obex-Use-GLib-helper-function-to-manipulate-paths.patch:
  obex: Use GLib helper function to manipulate paths. Instead of
  trying to do it by hand. This also makes sure that relative paths
  aren't used by the agent. Patch from fedora.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645876800">- Fixes for %_libexecdir changing to /usr/libexec (bsc#1174075)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1646481600">- update to version 5.63:
  * Fix issue with storing IRK causing invalid read access.
  * Fix issue with disconnecting due to GattCharacteristic1.MTU.
  * Add support for Device{Found,Lost} of advertising monitoring.</changelog>
  <changelog author="mwilck@suse.com" date="1646568000">- Add code to restore user modifications for modprobe.d %config files
  after moving the files to %_modprobedir
- Use %_modprobedir (jsc#SLE-20639)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1647777600">- update to version 5.64:
  This is another release mostly with bug fixes on HOG, GATT, A2DP,
  Media, AVDTP, AVRCP, and scanning failure.
  This release includes a fix for building with old glibc (&lt; 2.25)
  and other minor issues found with the static code analyzing tool.
  ISO packet support is added to the emulator as a part of LE Audio
  development.
- removed obsoleted 0002-Use-g_memdup2-everywhere.patch</changelog>
  <changelog author="gcomes.obs@gmail.com" date="1650974400">- add Requires(post): systemd for bluez-auto-enable-devices
  * fixes boo#1198906</changelog>
  <changelog author="gmbr3@opensuse.org" date="1651665600">- Move the dbus-1 system.d file to /usr (bsc#1199207)
- Fix self-obsoletion issues
- Add supplements to cups subpackage
- Split zsh completion into subpackage
- Don't tell the user to write to /usr (in README-mesh.SUSE)</changelog>
  <changelog author="code@bnavigator.de" date="1652011200">- Upgrade bluez-test requirement of PyGObject from ancient version
  2 to current version. (bluez/test is at least able to use it
  since 2014)</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 5.65:
  * Fix issue with A2DP cache invalidation handling.
  * Fix issue with A2DP and not initialized SEP codec.
  * Fix issue with A2DP and multiple SetConfiguration to same SEP
  * Fix issue with AVRCP and not properly initialized volume.
  * Fix issue with SDP records when operating in LE only mode.
  * Fix issue with HoG and not reading report map of instances.
  * Fix issue with GATT server crashing while disconnecting.
  * Fix issue with not removing connected devices.
  * Fix issue with enabling wake support without RPA Resolution.
  * Fix issue with pairing failed due to the error of Already Paired.
  * Add support for CONFIGURATION_DIRECTORY environment variable.
  * Add support for STATE_DIRECTORY environment variable.
  * Add support for "Bonded" property with Device API.
  * Add experimental support for ISO socket.
- drop bluez-test-2to3.diff (obsolete/upstream)</changelog>
  <changelog author="jlee@suse.com" date="1663156800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the patches and
  log: (jsc#PED-1407)
  - hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch patch
    be merged to 5.51 mainline. So 5.65 bluez already includes it.
    (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  - Add the following patches from the bluez-5.62 of 15-SP5:
  - disable_some_obex_tests.patch
  - disable tests for bypass boo#1078285
  - hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  - bsc#1013708 CVE-2016-9797
  - Al Cho has sent it to upstream but it not be merged:
    https://lore.kernel.org/all/20181031081508.25927-1-acho@suse.com/T/
  - hcidump-Fix-memory-leak-with-malformed-packet.patch
  - bsc#1015171 CVE-2016-9917
  - Al Cho has sent it to upstream but it not be merged:
    https://www.spinics.net/lists/linux-bluetooth/msg79852.html
  - hcidump-Fixed-malformed-segment-frame-length.patch
  - bsc#1013712 CVE-2016-9798
  - Did not send to upstream.
  - 0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  - Move 43xx firmware path for RPi3 bluetooth support bsc#1140688 bsc#995059 bsc#1094902
  - From https://www.yoctoproject.org/pipermail/yocto/2016-April/029424.html
  - Respin the following patches
  - bluez-test-2to3.diff
  - Removed some parts of patch because those codes be included
    in a1939bd51e0faba9a8550eea2590d99cb63a33c1 since 5.65.
  - The following patches are the same between SLE15-SP5 with openSUSE TW:
  - bluez-5.45-disable-broken-tests.diff in 15-SP5 matchs with
    bluez-disable-broken-tests.diff in openSUSE TW.
  - 0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch in 15-SP5
    matchs with RPi-Move-the-43xx-firmware-into-lib-firmware.patch in
    openSUSE TW. (bsc#995059)(bsc#1094902)</changelog>
  <changelog author="jlee@suse.com" date="1664798400">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will use the bluez.spec from openSUSE TW. The following
    are changes in bluez.spec of SLE15-SP5:
  - Obsoletes:      bluez-utils &lt;= 3.36
  to
  Obsoletes:      bluez-utils &lt; 3.36
  - Obsoletes:      bluez-audio &lt;= 3.36
  to
    Obsoletes:      bluez-audio &lt; 3.36
  - In %package -n libbluetooth3:
  Obsoletes:      bluez-libs &lt;= 3.36
  to
  Obsoletes:      bluez-libs &lt; 3.36
  - In %package cups, add the following statements
  Requires:       %{name}
  Requires:       cups
  Supplements:    (%{name} and cups)
  - In %package test
  Requires:       python3-gobject2
  to
  Requires:       python3-gobject
  - In %package auto-enable-devices package, add
  Requires(post): systemd
  - Add %package obexd and %package zsh-completion
  and their %description
  - In %prep
  - Removed
  %setup -q
  - Removed
  [#] FIXME: Change the dbus service to be a real service, not systemd launched
  sed -i "s:Exec=/bin/false:Exec=%{_libexecdir}/bluetooth/obexd:g" obexd/src/org.bluez.obex.service
  sed -i "/SystemdService=.*/d" obexd/src/org.bluez.obex.service
  [#] END FIXME
  - In %build, add
  - -with-dbusconfdir=%{_datadir}  \
  - In %install
  - Removed
  [#] FIXME: Do not delete the systemd service once we support systemd user/session services
  rm %{buildroot}%{_userunitdir}/obex.service
  [#] end FIXME
  - org.bluez.mesh.service to %{_sysconfdir}/dbus-1/system-services/,
  to
  org.bluez.mesh.service to %{_datadir}/dbus-1/system-services/,
  - In %files
  - Add
  %{_bindir}/isotest
  %{_libexecdir}/bluetooth/obexd
  %{_mandir}/man1/isotest.1%{?ext_man}
  - %config %{_sysconfdir}/dbus-1/system.d/bluetooth.conf
  to
  %{_datadir}/dbus-1/system.d/bluetooth.conf
  - Removed
    %{_datadir}/dbus-1/services/org.bluez.obex.service
  - Removed
    %{_datadir}/zsh/site-functions/_bluetoothctl
  - Add %files zsh-completion
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Removed shared-gatt-server-Fix-heap-overflow-when-appending-.patch in
    SLE15-SP5 bluez because 5.65 bluez already includes it.
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1664884800">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync the spec file and
  log: (jsc#PED-1407)
  - SLE15-SP5 will direct use bluez.changes for openSUSE TW.
    So keep the contents of SLE bluez.changes to bluez.changes.sle file.
  - Put to /usr/share/doc/packages/bluez/bluez.changes.sle in package.</changelog>
  <changelog author="jlee@suse.com" date="1666785600">- For pushing bluez 5.65 to 15-SP5 (bluez-5.62), sync more change log:
  (jsc#PED-1407)
  - The hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
    be merged to bluez-5.51 in 2018. (bsc#1013732)(CVE-2016-9801)
  - The following btmon patches are merged to bluez-5.51 and later:
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
    (bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  - The shared-gatt-server-Fix-not-properly-checking-for-sec.patch
    be merged to bluez-5.57 in 2021.
    (bsc#1186463 CVE-2021-0129 CVE-2020-26558)
  - The gatt-Fix-potential-buffer-out-of-bound.patch be merged to
    bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - The gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
    be merged to bluez-5.56 in 2021. (bsc#1187165 CVE-2021-3588)
  - Add JIRA-SLE-18497 number to 5.60, 5.61 and 5.62 update log
    to sync with bluez.changes in SLE15-SP5.
  - Install modprobe.conf files to %_modprobedir
    This change already in bluez.sepc in openSUSE:Factory/bluez.
    Sync the change log here. (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="ed81003abf4f913570e102f0bc2c55f020f97c53ef25826e0f224481a6347c44" name="libcap" arch="src">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="471a25ddcbb65513ebc786a0a02bcbbc7a7041bafc792bf3b69bb6a615a2a7e9" name="libcap-devel" arch="aarch64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="55199bdf6b660fffaa4428261ef63712d6f3f6134d8f9756967b8449a5504828" name="libcap-devel" arch="ppc64le">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="d7098703109e891a5598cd8d88bb31f875a6bdeb57dd64e7e54396efe839d35a" name="libcap-devel" arch="s390x">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="f05e3a537a6019c2032fb2e25dd66aac0dd111d971c40502c0f113e4896c0705" name="libcap-devel" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="3e68ca72a098159e8786afe4101ef41b622ca496a0f505510953eb18f22b4f23" name="libcap-progs" arch="aarch64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="34c41dba8f50fa0284e8bebf1179a4899e487ee39dae226e5c777955dda18977" name="libcap-progs" arch="ppc64le">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="19bdce7c6370f057cd40fe8bcf6c8e8a60a28a5f274d31647983f832ad5c87d7" name="libcap-progs" arch="s390x">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="77793aed357c0db04c37ed2c0a509560f5ce0151877eca20d235b6330fb23af2" name="libcap-progs" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="2c7f2cc5f2329b3a1f50a53a7289412a03c53c25af4d3d02c0ce68b8ad4c9174" name="libcap2" arch="aarch64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="980e347835c8d609d72780df7c6dee55266dae649cb3df27c156332356a6bbc7" name="libcap2" arch="ppc64le">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="e070eb3639ea777eac72b15a740574f8f066e6233bcc21d262222fff2b9f94be" name="libcap2" arch="s390x">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="cfcf0ea8c227094723bd85e5332fb8285af94e7d61d8ecc6e5b455f0900327db" name="libcap2" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="c546bbf847de619dde04205ee4e209b42c320aba721257f5478d873dcc364f29" name="libcap2-32bit" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="b36bcdc929b110141e1de47100b5299c5ce3a10e4dab37020efd09c416cc0a96" name="libcares2" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="10424f2a08af81c2d48bb8826ffe6b890ba74658c0f76d45bf3524de7014c59f" name="libcares2" arch="ppc64le">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="b9975188055a6a5eaa289c1aa142c2f6564644f74c92fdb4749642eb73da49cf" name="libcares2" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="6d36384bb2347feb6e1a36c5ecb794ffa36c47e915e335a4c11899c738ea4fda" name="libcares2" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="33c7eff8d4809579c5dd31aa15e76e96b8db4f76e91a23efea89b61b131eed7b" name="libcares2-32bit" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="19c0fa4d360498c99ebc54323b2b7bbd88136bf27163ceb258e2df0cdf5fc92e" name="libclingo4" arch="aarch64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="62cd11578fdd126d42876d10f9cfd3a38da4b64de7b26e9e1c310fc22551848d" name="libclingo4" arch="ppc64le">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="4a311d0722c058580df05543d95235800e1e214955228de7c7c1b2ff06d6829d" name="libclingo4" arch="s390x">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="d569084d74f4eaf87e025c7daeb5c2ed8e72d4736f4cb04b1a4a56de1c65297a" name="libclingo4" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="1b70fde4d7be0847a066aae5ea6f8567854cf3dd9ad1f73b1c1b3da4a68a532d" name="libcpupower0" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="9b301a9fc33546babde06e7a4e45905db34a8778397ebe97505d9102d2818d78" name="libcpupower0" arch="ppc64le">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="e23e61736316352d0467a6d1031f90df7fc7661bd4ad0efa1c2c2c5a8c1bf8d6" name="libcpupower0" arch="s390x">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="9a1840a370f6e2672453de8a2d8b04fd0c78ca35ef2fd9e3bcdd055e256fdf0a" name="libcpupower0" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150500.9.3.1"/>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1664971200">- Update to latest turbostat version 2022.07.28
  jsc#PED-1028
  Includes:
  Add ADL-N platform to Turbostat
  jsc#PED-1027
  Add RPL-P platform to Turbostat
  jsc#PED-1029
  Add RPL-S platform to Turbostat
  jsc#PED-1026
- Explicitly add patch to support Raptorlake-S
  jsc#PED-2066
  A tools-power-turbostat-add-support-for-RPL-S.diff</changelog>
  <changelog author="trenn@suse.de" date="1668513600">- Update to latest intel-speed-select package version from 1.10 to 1.13
  (jsc#PED-2137):
    1.13:
  * Fix build failure when using gcc options -Wl,--as-needed
  * Fix warning for perf_cap.cpu may be uninitialized
  * Fix off by one check for MAX_DIE_PER_PACKAGE
  * Fix issue with use of get_physical_die_id instead of
    get_physical_die_id
  * Warn if turbo is disabled and SST turbo-freq feature is requested
    1.12:
  * Allows out of band SST support, where some remote agent
    changes SST profiles via some Board Management Controller.
  * HFI support to process config level changes in oob mode
    1.11:
  * Update max performance when BIOS disabled turbo</changelog>
  <changelog author="trenn@suse.de" date="1683892800">- Add Emerald Ridge Intel CPU model support:
  * jsc#PED-4393
    intel-speed-select tool support for EMR
  A tools-power-turbostat-Introduce-support-for-EMR.patch
  A add_emerald_ridge_intel_family.patch
  * jsc#PED-4395
    Add EMR CPU support to turbostat
  A tools-power-x86-intel-speed-select-Add-Emerald-Rapid-quirk.patch</changelog>
</package>
<package pkgid="d52105a97c3df76d9e2368371d9c48a4212affe4c5fcaee21f0db615997a27f7" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="365e0dd44325e0b4ab77fdb1b12a9b6e1e9a56ba20c6dc6f1d6b41e845499730" name="libcups2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="bee2fb4c6dfa30c58e2d79e4810229a5081e410de7fffb19398f88b5606d53a9" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="52107b8f76a0db6a33611457f2e08a15b3559e6fc9e2ab4d7ab3c7284899b138" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3b5aca13d4fee017a71a0d697f9626cc8be2624a86f5993157e9bf9a3f01c029" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="9f4c0a4234856d641a1ad6bd5e8208d5273d79ca3aa93bdb046596f9ca28f482" name="libcups2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="e283fe31aa231f0475ee66c01de149fa0f7bcc9fbf3a3637a2c58ee4bba064fd" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="565b915bfe1afd29709909b5f8ef360c2ddcdbb74b586f6549d4f97d43012dc8" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="3fd5ade212d6e981e04d13feee81ea703e81bfa152f04b9e987bb5dddd68d3e9" name="libcups2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="196ed0dfe886b5f5cce2914a55688a49857f008685a8fa63df650c41c5d6d705" name="libcups2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0d9be10a1c4a17037845e2a7ef39f6a37e5a19e26abbe092b513b1ce0856f250" name="libcupscgi1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="a45396b0c90299b97f08cb7d83f74228d1f68af7568d3a563ff148760117fc41" name="libcupscgi1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="cf4d23e2405d8f1e648daebb13fd7fd5dadb51d878fcb9147b8f7adb44f0a086" name="libcupscgi1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="df986e401de28223bae9f95551cd403a26ae0ee19d6a546810e360dfa4f8e48d" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3c5bfc3eb0a366695f124fd626c7b11d1949e1a10369d037615ca2a51c28da5f" name="libcupscgi1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="39fe9b1af5a466f42299e09276cd2bcb458b7feead46a9e638e1ca1c52b0bffd" name="libcupscgi1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="d6baf5fa5d523acf309f621fc5a50ab89038c500294661f6f0c848fd703b354d" name="libcupscgi1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="c0477105c4928bbe7e3cf04afc00c743b4bea1c7f6b5e342b5a8a3371c6fe5e5" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="bdcf418f11c1d2bd07f8602280fc19b3b51e7eedb2155d2a6903f050c1ba06dc" name="libcupscgi1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="8ca644d39fa86af5338fd249850e00857dfd9048ace37c1702fd1fbeaa45e20d" name="libcupscgi1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="4ec9817771c8091722e702c41bb1608ed4b529960af908b93307131e40e7025c" name="libcupsimage2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="4927f369a6f8225ebfbe427ea4a25fc5a408e343db94a1d28065418e2868a9de" name="libcupsimage2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="b46c3cf5e34cd2f3b9220ce8ac52b3a5a8a92ac1c037dc58c0701d1da85995a9" name="libcupsimage2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="b3186344e5e9faea2cd3bc13502fdf1263589af0e448c8851a30e8652e65115c" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="cda3b00b1dee5971f57648754469fc8bc8b59fc0a04e00ef7ec82da9a9380401" name="libcupsimage2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="990e08ce724cc0deb8459d33d78d8fcdda43a0691a3b5daa29cf702749ac7847" name="libcupsimage2" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="6ff7e7274d911b4e8c908080442fa6fc5e08396af72c944b5ef9540fc11ca6f9" name="libcupsimage2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="0046d9db5a493f4463b7408d6b069d9513e22e3232006699e8bdf316cf56374a" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="03cc75234f66dfbc6a6e7e90952130b39a2c7ed5d5ededf9be06059ee54e2c0b" name="libcupsimage2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="697a1684cf9cdba60801850ec68a29b6bad57304c81e6002bd6789ac119bebba" name="libcupsimage2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="3fa0b055cc663ca1fe090954a5546962177c578181197774b816d5662e426871" name="libcupsmime1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="2799896c59443e70506bffd06852bf68c0395c72ca7798c77488e013bc9a651d" name="libcupsmime1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="91d43e49dbe91ef1ffedca29002834769840fbbd9deb72d23372c45da0aeace7" name="libcupsmime1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="2220e3cd73ee65be72a746fccc3c9bada3039b02d420c07e4b4b55eb562f4dc4" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="a378cee21520f64169279f86f561940afa1b045c306442d02e95b5cd498aadaf" name="libcupsmime1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="78e576b2c09c438815030f8f337f6c6519d0bb4dd0e0cde7f64f2ff90e643f00" name="libcupsmime1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="8e9d9c4fe0c3a40b44fac0881f62319bfd43d5393d4d43b63cab91334a6b2b6c" name="libcupsmime1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="945fd096c9576ae4a99acd750d5a4becc40f2c53bf92bdf60c80e5e800108ffe" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="b71582d6028c2e22d2721021076646bae329736eb110583ccd4c2ecb3de5bd8d" name="libcupsmime1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="17ebfc44498dbb43027fc0d9c34fe0a0d2049547e199fdcb794bb6fb8bd804ad" name="libcupsmime1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="7ab2162e22f36db32749c7b1962ff6aed32fe44aab55e7c440353f1e0e81ebc9" name="libcupsppdc1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="7303c4610be503434767be37dac3dbe1263fbc9c3433ac873009fae1f36fd430" name="libcupsppdc1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="97e7353588a3e8642f3cf3a56dae6d1685723ec1251fbb1f803bce14342bb802" name="libcupsppdc1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="ee468b506572a8bcaaf5f3b082371815daf0b40e73f39377d9729dd8dad3cdb5" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="b4a52f6bb3e4531f2ed83d329640f7978941e413bee2aa165e6efa3f5cdf6b48" name="libcupsppdc1" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="7629631da79b88ae8593efd51f3ba07b362e60a48ef4bd17bed0d7b66eb7aa2e" name="libcupsppdc1" arch="ppc64le">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="e6a2067335e07b4591fc3c685b6ba5e971b00c5fa13d48b9349a51b7abbe0d6e" name="libcupsppdc1" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="a256545a68fc7656912ccde60ffee0c2cedf26871a7b3d3e705b421ef87f7288" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="ee72f7e3fea560b962f347ad22f1a6cd9b5192c1204627a0f230e13921169eb3" name="libcupsppdc1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="8e7e4a07d2831270432d26b487b67dd68c272da2e57798a6d0853e27ff34cdde" name="libcupsppdc1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="ffe94e1bdc2ccc9cc80a0e86e384a0fe560848ed00c51b47b862aeb83a7b07e9" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="824b3dc49eef41ad4494638f235d585e2e2ac86abfdf849943a97c6705994dc1" name="libcurl-devel" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="99f7ec585849f9992530ad0a4886708ec72505d0dad945946f625b10ec47c9e7" name="libcurl-devel" arch="ppc64le">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="6f8b66ac35019f8a1956a4adfc74c9449872e06c8722b5dd2bb5104bd3621406" name="libcurl-devel" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="0ce4064fe5b32ed283314325508e825dd53f4cfc89454c03c36cd6b7ed068091" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="d378e656f3a36c45a9b7213a90999c346e529d98c25e75fa0f8cc56fcff7983d" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="f2eadc1832aaf797377c18f7cc795c543a1409c76dfc4ff1ac6221e8cdac19e1" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="e45ce9689dc4e9fc2459372e8bff86a2a4dcce54df19706397dbff87ef0f9436" name="libcurl4" arch="ppc64le">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="083083b811a02da47886e400618876296e4b181cdea7c7f8711f53684045c4fc" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="d85d1f769699983521df183cacc1e5db735a091b71e91401685b245eeaa9fd14" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="15c53ffce60c6ecc91f8eaafe3895457b554ed87e87ec9dcc6a1a94c663047a1" name="libdav1d6" arch="aarch64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="290ce39d887b23bdb7270d1faf8a81a2155422b8241d3910a4738317b638a441" name="libdav1d6" arch="ppc64le">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="c0c01cb6cb83f0d6b23f3097afe46aa7c61fce72d1ad090866d6ac28c3cf12a8" name="libdav1d6" arch="s390x">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="f0e2dbc169dd1df9ae8882a4c2cb9c8bee9afcb1b5b0b927a4299f195183b44a" name="libdav1d6" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="1e13b8c071ea58d969df9d5b245ac6c9f4c05b51349e64d6b903f10ef67bf2b2" name="libdav1d6-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="150500.3.3.1"/>
  <changelog author="aloisio@gmx.com" date="1557576000">- Update to version 0.3.1
  * Fix a buffer overflow in frame-threading mode on SSSE3 CPUs
  * Reduce binary size, notably on Windows
  * SSSE3 optimizations for ipred_filter
  * ARM optimizations for MSAC</changelog>
  <changelog author="olaf@aepfle.de" date="1557748800">- Added dav1d.armv6.patch (disables armv7 asm for armv6 builds)</changelog>
  <changelog author="aloisio@gmx.com" date="1565006400">- Update to version 0.4.0
  * Fix playback with unknown OBUs
  * Add an option to limit the maximum frame size
  * SSE2 and ARM64 optimizations for MSAC
  * Improve speed on 32bits systems
  * Optimization in obmc blend
  * Reduce RAM usage significantly
  * The initial PPC SIMD code, cdef_filter
  * NEON optimizations for blend functions on ARM
  * NEON optimizations for w_mask functions on ARM
  * NEON optimizations for inverse transforms on ARM64
  * Improve handling of malloc failures
  * Simple Player example in tools
- Dropped dav1d.armv6.patch (merged upstream)
- Bumped SOVERSION to 2</changelog>
  <changelog author="aloisio@gmx.com" date="1570795200">- Update to version 0.5.0
  Medium release fixing regressions and minor issues, and
  improving speed significantly:
  * Export ITU T.35 metadata
  * Speed improvements on blend_ on ARM
  * Speed improvements on decode_coef and MSAC
  * NEON optimizations for blend*, w_mask_, ipred functions for
    ARM64
  * NEON optimizations for CDEF and warp on ARM32
  * SSE2 optimizations for MSAC hi_tok decoding
  * SSSE3 optimizations for deblocking loopfilters and
    warp_affine
  * AVX-2 optimizations for film grain and ipred_z2
  * SSE4 optimizations for warp_affine
  * VSX optimizations for wiener
  * Fix inverse transform overflows in x86 and NEON asm
  * Fix integer overflows with large frames
  * Improve film grain generation to match reference code
  * Improve compatibility with older binutils for ARM
  * More advanced Player example in tools
- Bump soversion to 3
- Added arm64_ipred_symbols_aligned.patch to fix aarch64
  build</changelog>
  <changelog author="aloisio@gmx.com" date="1572091200">- Update to version 0.5.1
  * SSE2 optimizations for CDEF, wiener and warp_affine
  * NEON optimizations for SGR on ARM32
  * Fix mismatch issue in x86 asm in inverse identity transforms
  * Fix build issue in ARM64 assembly if debug info was enabled
  * Add a workaround for Xcode 11 -fstack-check bug
- Dropped arm64_ipred_symbols_aligned.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1575460800">- Update to version 0.5.2
  * ARM32 optimizations for loopfilter, ipred_dc|h|v
  * Add section-5 raw OBU demuxer
  * Improve the speed by reducing the L2 cache collisions
  * Fix minor issues</changelog>
  <changelog author="aloisio@gmx.com" date="1583496000">- Update to version 0.6.0
  * New ARM64 optimizations for the 10/12bit depth:
    + mc_avg, mc_w_avg, mc_mask
    + mc_put/mc_prep 8tap/bilin
    + mc_warp_8x8
    + mc_w_mask
    + mc_blend
    + wiener
    + SGR
    + loopfilter
    + cdef
  * New AVX-512 optimizations for prep_bilin, prep_8tap,
    cdef_filter, mc_avg/w_avg/mask
  * New SSSE3 optimizations for film grain
  * New AVX2 optimizations for msac_adapt16
  * Fix rare mismatches against the reference decoder, notably
    because of clipping
  * Improvements on ARM64 on msac, cdef and looprestoration
    optimizations
  * Improvements on AVX2 optimizations for cdef_filter
  * Improvements in the C version for itxfm, cdef_filter
- Bump sover to 4</changelog>
  <changelog author="aloisio@gmx.com" date="1589976000">- Update to verison 0.7.0
  * Faster refmv implementation gaining up to 12% speed while
  - 25% of RAM (Single Thread)
  * 10b/12b ARM64 optimizations are mostly complete:
    + ipred (paeth, smooth, dc, pal, filter, cfl)
    + itxfm (only 10b)
  * AVX2/SSSE3 for non-4:2:0 film grain and for mc.resize
  * AVX2 for cfl4:4:4
  * AVX-512 CDEF filter
  * ARM64 8b improvements for cfl_ac and itxfm
  * ARM64 implementation for emu_edge in 8b/10b/12b
  * ARM32 implementation for emu_edge in 8b
  * Improvements on the dav1dplay utility player to support 10
    bit, non-4:2:0 pixel formats and film grain on the GPU</changelog>
  <changelog author="aloisio@gmx.com" date="1592827200">- Update to version 0.7.1
  * ARM32 NEON optimizations for itxfm, which can give up to 28%
    speedup, and MSAC
  * SSE2 optimizations for prep_bilin and prep_8tap
  * AVX2 optimizations for MC scaled
  * Fix a clamping issue in motion vector projection
  * Fix an issue on some specific Haswell CPU on ipred_z AVX2
    functions
  * Improvements on the dav1dplay utility player to support
    resizing</changelog>
  <changelog author="dimstar@opensuse.org" date="1598961600">- Add dav1d-nasm-2.15.patch: Fix compilation with nasm 2.15.</changelog>
  <changelog author="aloisio@gmx.com" date="1606219200">- Update to version 0.8.0
  * Improve the performance by using a picture buffer pool;
  * ARM32 optimizations for 8bit bitdepth for ipred paeth,
    smooth, cfl
  * ARM32 optimizations for 10/12/16bit bitdepth for
    mc_avg/mask/w_avg,
    put/prep 8tap/bilin, wiener and CDEF filters
  * ARM64 optimizations for cfl_ac 444 for all bitdepths
  * x86 optimizations for MC 8-tap, mc_scaled in AVX2
  * x86 optimizations for CDEF in SSE and
    {put/prep}_{8tap/bilin} in SSSE3
- Bump soversion to 5
- Drop dav1d-nasm-2.15.patch (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1609588800">- Update to version 0.8.1
  * Keep references to buffers valid after dav1d_close().
    Fixes a regression caused by the picture buffer pool added
    in 0.8.0.
  * ARM32 optimizations for 10bit bitdepth for SGR
  * ARM32 optimizations for 16bit bitdepth for
    blend/w_masl/emu_edge
  * ARM64 optimizations for 10bit bitdepth for SGR
  * x86 optimizations for wiener in SSE2/SSSE3/AVX2</changelog>
  <changelog author="aloisio@gmx.com" date="1613995200">- Update to version 0.8.2
  * ARM32 optimizations for ipred and itx in 10/12bits,
    completing the 10b/12b work on ARM64 and ARM32
  * Give the post-filters their own threads
  * ARM64: rewrite the wiener functions
  * Speed up coefficient decoding, 0.5%-3% global decoding gain
  * x86 optimizations for CDEF_filter and wiener in 10/12bit
  * x86: rewrite the SGR AVX2 asm
  * x86: improve msac speed on SSE2+ machines
  * ARM32: improve speed of ipred and warp
  * ARM64: improve speed of ipred, cdef_dir, cdef_filter,
    warp_motion and itx16
  * ARM32/64: improve speed of looprestoration
  * Add seeking, pausing to the player
  * Update the player for rendering of 10b/12b
  * Misc speed improvements and fixes on all platforms
  * Add a xxh3 muxer in the dav1d application</changelog>
  <changelog author="aloisio@gmx.com" date="1616587200">- Disable LTO (fix boo#1183956)</changelog>
  <changelog author="aloisio@gmx.com" date="1621166400">- Update to version 0.9.0
  * x86 (64bit) AVX2 implementation of most 10b/12b functions,
    which should provide a large boost for high-bitdepth
    decoding on modern x86 computers and servers.
  * ARM64 neon implementation of FilmGrain (4:2:0/4:2:2/4:4:4 8bit)
  * New API to signal events happening during the decoding process</changelog>
  <changelog author="aloisio@gmx.com" date="1627560000">- Update to version 0.9.1
  * 10/12b SSSE3 optimizations for mc (avg, w_avg, mask, w_mask,
    emu_edge), prep/put_bilin, prep/put_8tap, ipred (dc/h/v,
    paeth, smooth, pal, filter), wiener, sgr (10b), warp8x8,
    deblock, film_grain, cfl_ac/pred for 32bit and 64bit x86
    processors
  * Film grain NEON for fguv 10/12b, fgy/fguv 8b and fgy/fguv
    10/12 arm32
  * Fixes for filmgrain on ARM
  * itx 10bit optimizations for 4x4/x8/x16, 8x4/x8/x16 for SSE4
  * Misc improvements on SSE2, SSE4</changelog>
  <changelog author="aloisio@gmx.com" date="1630670400">- Update to version 0.9.2
  * x86: SSE4 optimizations of inverse transforms for 10bit for
    all sizes
  * x86: mc.resize optimizations with AVX2/SSSE3 for 10/12b
  * x86: SSSE3 optimizations for cdef_filter in 10/12b and
    mc_w_mask_422/444 in 8b
  * ARM NEON optimizations for FilmGrain Gen_grain functions
  * Optimizations for splat_mv in SSE2/AVX2 and NEON
  * x86: SGR improvements for SSSE3 CPUs
  * x86: AVX2 optimizations for cfl_ac</changelog>
  <changelog author="aloisio@gmx.com" date="1647604800">- Update to version 1.0.0
  * Automatic thread management.
  * Add support for AVX-512 acceleration.
  * x86 code speedup (from SSE2 to AVX2).
  * New grain API to ease acceleration on the GPU.
  * New API call to get information of which frame failed to
    decode, in error cases.
  * Numerous small bug fixes.
- Bump soversion to 6</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1665662400">- Drop _lto_cflags define, current version supports lto build.
- Drop unneeded rpm BuildRequires.
- Add pkgconfig(libxxhash) BuildRequires and stop passing
  xhash_muxer=disabled to meson, build hash_muxer support.
- Add check section and meson_test macro, run tests during build.</changelog>
  <changelog author="mgorse@suse.com" date="1683720000">- Add dav1d-CVE-2023-32570.patch: fix possible crash when decoding
  a frame (bsc#1211262 CVE-2023-32570).</changelog>
</package>
<package pkgid="7b3f103eac381aad74228a0a1bebf96412709b530d695315921ff3d43478b879" name="libdwarf" arch="src">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="bwalle@suse.de" date="1213617600">- update to 20080613
  Removed __SGI_FAST_LIBELF code, no one could use it anyway.
  Fixed an off-by-one in dwarfdump which could reference off the
  end of an array in a specfic circumstance and verify string table
  index refers to inside the table when printing relocations.
  Corrected return code from libdwarf when there is no dwarf
  information. Thanks to Carlos Alberto Enciso for noticing the
  bugs. Fixed indentation and removed some tabs in favor of
  spaces (in a few files).</changelog>
  <changelog author="bwalle@suse.de" date="1213704000">- update to 20080615
  fixed wrong directory name in tarball (20060813 -&gt; 20080815)</changelog>
  <changelog author="bwalle@suse.de" date="1218542400">- update dwarfextract: fold dwarf-dwarfextract4.patch into
  (from LKCD CVS) libdwarf-add-dwarfextract</changelog>
  <changelog author="bwalle@suse.de" date="1219406400">- update to 20080818
  Minor improvements: dwarfdump print_reloc.c referred to
  sym_data_entry_count in one place where sym_data_64_entry_count
  should have been tested. DW_DLA_PUBTYPE_CONTEXT was a typo,
  DW_DLE_PUBTYPE_CONTEXT was intended. Fixed indentation and
  removed some tabs in favor of spaces (in five files). A couple
  files had a couple lines with CR-LF line endings, the CR is now
  gone. Corrected minor typographical errors in libdwarf2p.1.mm and
  libdwarf2.1.mm and regenerated the pdfs.</changelog>
  <changelog author="dgollub@suse.de" date="1222862400">- removed dwarfextract from libdwarf-tools package
  (got split into seperated package: dwarfextract)
- reenabled static build of libdwarf</changelog>
  <changelog author="dgollub@suse.de" date="1222862401">- added libdwarf-relocation-support.patch:
  initial ELF relocation support for libdwarf</changelog>
  <changelog author="dgollub@suse.de" date="1223467200">- added libdwarf-dwarf3-dw_attributes.patch:
  Allow attribute DW_AT_const_value in dwarf_add_AT_targ_address_b().
  GCC generates code which has DW_AT_const_value with DW_FORM_addr.
  Additional DWARF3 enhancments:
  - allow DW_AT_entry_pc in dwarf_add_AT_targ_address_b()
  - allow DW_AT_call_column, DW_AT_call_file, DW_AT_call_line in
    dwarf_add_AT_unsigned_const</changelog>
  <changelog author="jengelh@medozas.de" date="1284897600">- Update to newer libdwarf (20100808), because the "perf" package
  needs a version &gt;= 20100214. Fixes include:
  * dwarfdump was counting eh_frame low-pc as a duplicate of
  .debug_frame low-pc
  * Fixes some CFA_expression handling in libdwarf and allows some
  compiler mistakes a bit more leeway in dwarfdump (so the dump
  continues in the face of certain errors).
  * ARM and MIPS64BE handling
- Stripped changelog from .spec file, since it is already in
  .changes.</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="jw@suse.com" date="1354795200">- updated to 20121130
  which fixes http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=681748
  dwarfdump ERROR:  dwarf_loclist:  DW_DLE_LOC_EXPR_BAD (128)
- enabled dwarfdump2 in specfile</changelog>
  <changelog author="jw@suse.com" date="1354795201">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="bf82ae011323bd4cb5e906ee6e13cf32d2febd1799b53bde8dc4a8d835273d07" name="libdwarf-devel" arch="aarch64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="c83381b6df985e1a5d36cc028830dc6c02c72accad04e72dfa0d4186169d7c18" name="libdwarf-devel" arch="ppc64le">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="4b00ded9de8113519bc7d51f473012f6845559bff91bb6a9001a8821dfb6b9a0" name="libdwarf-devel" arch="s390x">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="6d401fe5570552bb7a7572f07a65151de2500c4a05d822e2e544b8413f339824" name="libdwarf-devel" arch="x86_64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="c54a88c4f8ef973ca5c16006fd971e5ea3cbfc6d1d852ee24201a5ef3671eac4" name="libdwarf-devel-static" arch="aarch64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="663084fc8aee312fc9296beb68aa6aa5d0a571464a06f04bc865adeea302f849" name="libdwarf-devel-static" arch="ppc64le">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="d6bbae8de8209131af8676a92dc5f04dee9b9a4f1de40efb0f13c59d1420a5b0" name="libdwarf-devel-static" arch="s390x">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="33dbb43add7e13f0d142789bb75c2b20e81d41b87fcfa414bc5c8c51dcd37d64" name="libdwarf-devel-static" arch="x86_64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="0c02dd491f0e8958d3e79ca406a650fa38aa0302ea85f041c76ea4d1838837e5" name="libdwarf-doc" arch="aarch64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="a02c0320e68cf3edd03260d320a6139073fb049d4b39c307f641c455d17e5141" name="libdwarf-doc" arch="ppc64le">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="4d54458c2cf96d329503dce263d056c54af3a8b14d9282ef5024b6cba1aacccc" name="libdwarf-doc" arch="s390x">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="50a872748d06c3d2e100c08ccd01ec8f817108cbb6f4c3ade935674759f1d28b" name="libdwarf-doc" arch="x86_64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="401071ed24304aae6fe007655ac12fba9c8ccd92af9492624a5599c152185673" name="libdwarf-tools" arch="aarch64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="399c3180e7824414981287a0fae671897967443870c81ebfa76f1ca3231a110c" name="libdwarf-tools" arch="ppc64le">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="8a6c4a78fb7c747d3dfdd819bb3439ce0f31d9b809dfccff85316f7039aa1dd4" name="libdwarf-tools" arch="s390x">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="c58ffe25e0867b165cff22a804fdeaab7ea1a5d26e9e7afd1d257ce17da5a3a7" name="libdwarf-tools" arch="x86_64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="bdea890264948a1b79aea5f1a26a8dee7696313550bd6d60fc7ad55abda4d158" name="libdwarf1" arch="aarch64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="8990bc291cfc2f0f505a7300f6069bc1630171f76ad89c3f89ccb440f37f654d" name="libdwarf1" arch="ppc64le">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="860bf813dcceac4948da286540cd457e80fec734b7e7b099ae05d927b623059b" name="libdwarf1" arch="s390x">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="d02c60981ef56885d8700b98c0b3e06b791a4cf0655d2505e1ceca2006960afc" name="libdwarf1" arch="x86_64">
  <version epoch="0" ver="20161124" rel="150000.3.6.1"/>
  <changelog author="jw@suse.com" date="1354795200">- dwarfdump2 does not build on SLE_11_SP1, skipping.
- removed libdwarf-relocation-support.patch,
  assumed upstream as a different implementation.</changelog>
  <changelog author="jengelh@inai.de" date="1413374400">- Update to new upstream release 20140805
  * A mistake in handling DW_OP_GNU_const_type could lead to a
  libdwarf coredump at times.
  * Added AARCH64 relocation support.
  * Adds GNU-specific DW_FORM codes so recent gcc objects can be
  read usefully.
  * Adds new functions to libdwarf for new DWARF reference types.
  * Libdwarf now follows the DWARF2 standard properly in reading
  DW_FORM_ref_addr.
  * Source incompatibility for users of producer code:
  dwarf_producer_init() now has a new interface and a sensible way
  to select the output ABI/ISA for relocation numbers. Part of
  preparation to emit DWARF3,4,5.
  * The reader code now handles DebugFission, called Split Dwarf
  objects in the draft DWARF5 standard.
  * The reader now can get the content of .gdbindex and
  .debug_cu_index and .debug_tu_index sections and dwarfdump -I
  can print them. Support is incomplete for the cu,tu sections:
  They exist in a .dwp object (GNU Debug Fission, to be in DWARF5)
  which is not yet properly handled.
- Enable parallel build and remove ancient specfile tags and sections</changelog>
  <changelog author="idonmez@suse.com" date="1414065600">- Package COPYING and related license files.</changelog>
  <changelog author="matz@suse.com" date="1421668800">- Update to new upstream release 20150115:
  * New checking options added to dwarfdump
  (-ku -kuf -kD -kG -O file=&lt;path&gt;).
  * Deal better with internal errors (invalid ELF files/DWARF
  sections or out of memory) (fixes boo#911839).
  * Remove dwarfdump2: it had no advantages over dwarfdump anymore.</changelog>
  <changelog author="matz@suse.com" date="1421841600">- Add libdwarf-fix-parallel-build.diff.</changelog>
  <changelog author="dmueller@suse.com" date="1483358400">- update to 20161124 (bsc#1012823, bsc#1001133,
  CVE-2016-9480, CVE-2016-7410, CVE-2016-7511, CVE-2016-5028,
  CVE-2016-5029, CVE-2016-5030, CVE-2016-5031, CVE-2016-5032,
  CVE-2016-5033, CVE-2016-5034, CVE-2016-5035, CVE-2016-5036,
  CVE-2016-5037, CVE-2016-5038, CVE-2016-5039, CVE-2016-5040,
  CVE-2016-5041, CVE-2016-5042, CVE-2016-5043, CVE-2016-5044 ):
  * removes libdwarf-fix-parallel-build.diff
- use shared library policy, main package removed and libdwarf1 added</changelog>
  <changelog author="jengelh@inai.de" date="1483358401">- Fixup RPM groups and summaries. Drop redundant PreReq.
- Put static in separate package.</changelog>
  <changelog author="dmueller@suse.com" date="1483358402">- add missing splitrequires
- revert rpm groups messup</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link /usr/bin/dwarfdump as PIE (bsc#1185057).</changelog>
  <changelog author="matz@suse.com" date="1688385600">- Add libdwarf-cve-2020-27545.diff to fix CVE-2020-27545
  (bsc#1193102).</changelog>
</package>
<package pkgid="93f702e57e8e9e2c4af52336b3cfaf4a98c749b0037f39e101ac5a9685a72d98" name="libfrr0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="b3f5cce19d97f28657f31f4862425e2fb6b8e12bd8754e6bcb67332b7a0f39eb" name="libfrr0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="5f098b4d304bd8b08b353f0f5a91e99c20c1f4d73e7e2ed27340dbcf378585af" name="libfrr0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="e2db4be401087ea1dfd01e2a9b4869c232ce5587833d3f2033cb13949100979e" name="libfrr0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="01b2d9c51cdeb45f0d8491aeb6ac9cfe7930c85295a7fe1b929412f06202feff" name="libfrr_pb0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="ed75d2a041982ffe50d9d3fca995c5feac4d76537ab653c2477ff161055a1a66" name="libfrr_pb0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="5b8b90cc18319e186f25004042f21fa5a345da4d5db748eefe03edb078865260" name="libfrr_pb0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="2823c736c7d7d4c5af05d6a6b67784a44f91548bde3567fb3256f35811783966" name="libfrr_pb0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="804390c0ad4f63693ae1252c6dc2525818620f401cd7663c2d9d720d8a7cbafe" name="libfrrcares0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="db370ad5bd16862e2a7e667215c4d821604aa6373937a198a5e2f06ca9877f68" name="libfrrcares0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="61dd09c7c81f395db62d5a9f00e1e3feb9629b59fb3145625ff291a1087e7080" name="libfrrcares0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="4167a85469564118fd38d95aad0bf6e48f3e8f3c178486ee3c92fe99baee7c55" name="libfrrcares0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="8c9af9d795879c7ad3d28d7d66dcf2e66c10a3e027152e368c16015fdea8b2ac" name="libfrrfpm_pb0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="7e65b1e001e256372ea0fa180eeb46ee8c969eb615ea1ffd4b27f9578efe06f9" name="libfrrfpm_pb0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="c7bb588791431cfb973c1d82270bf15b3d29fe882fdcec6846bb62d0ed53816d" name="libfrrfpm_pb0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="334d545fa060fd70d4dfdcef3fd63a6c1f9dd244e1a59f21ee8d4cb7fbbcb628" name="libfrrfpm_pb0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="8d924b095f55f5f7405a5e60c70c34f999463105d737faa5d183f6b4216cedc8" name="libfrrospfapiclient0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="9093794f93ade2bb43a91f01d30669f670804e3443e55d0f7adc1738a5b9d2f2" name="libfrrospfapiclient0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="f661ec90fbb1109248efb4ffe0fb21b9b846120d0497c490bc480163c408a364" name="libfrrospfapiclient0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="2bfbb2b759aed651a7d4ffd6d35be8f22ac0c8445b38483aa4ac8dfd3d1413a0" name="libfrrospfapiclient0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="64fa7fb40db340955bb9129ab00c21b3ab4e9c200c109ae963300828e2f93f1c" name="libfrrsnmp0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="0b407966c38f123cb6ebdaa77612260a82bdec3f8ed0708ca96b07ff07f715ac" name="libfrrsnmp0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="3cfe27f3131f66d0be993c345348fa7128dacd1eaf7c9f400706eab155eeb720" name="libfrrsnmp0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="c1b856f9aa2db6eab67747ad31ec8c317fb48155ecaa4417bd12ffc15b11d728" name="libfrrsnmp0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="859b6aa886e7ca33a3ba10e26c1d907f68b647887df3d4d2ba6c46239f48a1a8" name="libfrrzmq0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="eb841941ab77d822fbd38a9695f57fbc63c79c91d7a5a0136faf55b5a23138be" name="libfrrzmq0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="1cc70b81d5cff507e66ae0f9e10e9c0923608d34aa624c9e7de0af355727f5c9" name="libfrrzmq0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="b87aea6d80455ea2c0e2d664dbdf93abb998009aa820e47f6d6f2c81cd898592" name="libfrrzmq0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="039376ad4e85952670bf5525f8a25259c35291a5dc6f64947fcfcee0860e4baa" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="e7a7f964058bba0da85e218f9775f1bab54c17e7de277a5b8b26bd521b2c6409" name="libgcc_s1" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="70a0a6a372f61785eee95be8d77a9c595076e6644872c5f0857d75bda3def0ca" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="eea10abfaf64e116455d7a85ebb345dbd7f36d1750ffc4fa17dfe06e4432beb8" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fac3cf4f6184c9c5cd3ff03195d209c4181d39244247ea69c3a244cdafba55e3" name="libgcc_s1-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="57e99cf941c120a9b28f437ac0748dd132a2fb3278a513b1ce8253e5b21376cb" name="libgcc_s1-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ca48003649842d90231fab1e23c9cf6e717b83fb4bf2ad248de43fc4413b2a8b" name="libgdruntime3" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="85a0514b782c5bd1384512dd38a3061c59bbf677b96c1f6e73ef7bd355294e3d" name="libgdruntime3" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="bea1c462fd0a57eebca6a2911e636c74aaea08979691660bc49680c3ac27e292" name="libgdruntime3" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="63540d3da815e3d4920c52afd5fe100d899301ac06338c6ee6fd8172adf83b0d" name="libgdruntime3-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f41f86aeb4c03b0768583acdaba0457b3991ac929afe5b3b9e466045549ce7e9" name="libgdruntime3-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="178a2d6a754b7aa7e7b01ba491707ee91d78528d6546e753a12e4e4f9fa68ee7" name="libgfortran5" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d8638722855926864f6c6e7afc8b87f25481c30afeaa6cab4d96ba7e4a5b58ea" name="libgfortran5" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9a8061d5f08e910c7442a3165952799818c2c85f1d05c248474d8e7de647717f" name="libgfortran5" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4a0125e60f1efdf2d39aae0576edf024cc2db67007f089e20d8a59cc1bb2c4c7" name="libgfortran5" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="da5e80a77ec758992f389b563c42f4ae177367869884deddcffb791ff7477cd4" name="libgfortran5-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6b02f9695e29a2d1cb3b2e7201822eedb1eae423d97f45b2cbfac4e1af650922" name="libgfortran5-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="320af8d82ff4d9adbc3f0d946c8a4933d31b0b506c75937e62f11589f5092224" name="libgo21" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a68203495136ad51e73fac5a7d612ed8834c36d4e87249407adce9ed8afccfd6" name="libgo21" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="aadd60eaee5dee236283f914c17da4ae4ef27fcbbb625b912e7b33a29452d5e3" name="libgo21" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="761748810463ee795fa66ac6d217800ec51fa825b49d966f0985c61ca46dfbe2" name="libgo21" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="daddf46e1472c25357ff617c80cd887dca10c8aae8362da562f305ffb9c3649c" name="libgo21-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="69c8eb2c44e6609ed32c71d4c8f40d619b98371844d26dc318242b581e6916a3" name="libgo21-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="32f45df8d3d0eb4822b29c1d69762fb5f396bcc4beab29fe514a4606ed8bb8df" name="libgomp1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="44c335cf2609c51ee980c44063566a079205a6c4bbb2799e98f8a680b58e786c" name="libgomp1" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c048297d80a6659aae7c9a201d6daebf38f62529ef6c416d88838ecf9d4b3d84" name="libgomp1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4760eb71ac3f7082faaf85ad1e17212feaa0c1b32dddd2a2c60995c7b00740bc" name="libgomp1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b87315e1a32a507f7f4ff3f36a825676e4529e50387e20a767e6c34b88259565" name="libgomp1-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="95cc83f79d5cc6b0f62d36eff4bca006542274ff4e5bb5b4f02c1ecba364826d" name="libgomp1-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="71d74815aa3423b0ca96298adc1a0fe85cdedfb5fbb71de74e5618fae0356aa4" name="libgphobos3" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ea20b381d3646c60a35c6979acacb1ea2f65d229a1fffa19fb87c853f3af76e0" name="libgphobos3" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8704fac97f7ed8a7571c1b83f7712404c23574a22ad0dcb70fb86693e6c85cdb" name="libgphobos3" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="af92e82896da6deb43a6b028bb81b7f593d3e5416fee9fb32cf78e265274f716" name="libgphobos3-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dab3976f0d5b0a49077fccb0826f36b4b149493bac55d181f08163c5e39372d1" name="libgphobos3-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5267363569edaf58e464512ac170350ad61359cf1f8496d83ae0869758d26ce8" name="libhwasan0" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ada920920dfce838ac7fd209b8dd4f479c8d697ce30c8d144abdbde09c69577d" name="libiniparser-devel" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="c54ff7791ab8b12a21f74cff1c8f8e66ebc346d87bb2f78ac9e7e104d0d708cb" name="libiniparser-devel" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="5d57f1a929f373c15a4cbeec5b2d3cab174619bff7750f2227b03152066cb823" name="libiniparser-devel" arch="s390x">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="ea148c876cc372a8354cf7f77173b3a37c405be142a92deea13ec9be9217618f" name="libiniparser-devel" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="f28e30a42ab3cd02819a9af830089c2764d281c7aedaebcf14faf02c5350ea35" name="libiniparser1-32bit" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="8c3075a280839437573a896b51628494d949bb523392a092e61a0eb777527293" name="libiniparser1" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="d8fdbe701f76e8847bc896b52d4b9524ad957df4c11d9820e808e4cb0b2792ac" name="libiniparser1" arch="ppc64le">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="f8f0da106dff55f2d88d6dc57ae72996807278d97945a94f195d129df43cc657" name="libiniparser1" arch="s390x">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="99525a781cda6a1f15049fd65df7f7387ab7989379f3e0d8235c80db014563d8" name="libiniparser1" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150500.4.3.1"/>
  <changelog author="lmuelle@suse.com" date="1338724800">- Define library name and use it instead of libiniparser0.
- Remove unused debug_package_requires define.</changelog>
  <changelog author="lmuelle@suse.com" date="1338724801">- Use the unversioned libiniparser name on pre-11.2 systems only.</changelog>
  <changelog author="lmuelle@suse.com" date="1338897600">- Define library name and use it instead of libiniparser0.</changelog>
  <changelog author="lmuelle@suse.com" date="1370606400">- Include LICENSE file from the source tar ball.</changelog>
  <changelog author="lmuelle@suse.com" date="1395057600">- Remove superfluous obsoletes *-64bit in the ifarch ppc64 case; (bnc#437293).</changelog>
  <changelog author="lmuelle@suse.com" date="1403179200">- Update to git snapshot 20140619 c5beb80a
  + Fix coverity issues
  + Fix resource leaks
  + Modify to build unbounded keys &amp; values from multi-line input
  + Fix crash with crafted ini files
  + Makefile fixes: Library build, targets
  + Prevent compiler warning when compiling for 64 bit
  + Build system improvements
- Update iniparser_remove_rpath.patch</changelog>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to git snapshot 20150605 b1c4ac6f
  + Use the same xstrdup implementation for both source file
  + allocate memory for string termination
  + Add travis.yml
  + iniparser_getseckeys doesn't return a malloc ptr anymore
  + One more static + whitespace cleanup
  + Prevent negative array index access when a line solely consists of
    newlines and spaces
  + Made strstrip() static
- Remove libiniparser from baselibs.conf</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to 4.1 (stable release)
  + For full change set, see:
    https://github.com/ndevilla/iniparser/compare/b1c4ac6f...v4.1
- Cleanup with spec-cleaner
- Rebase iniparser_remove_rpath.patch
- so number bumped from 0 to 1 per upstream policy</changelog>
  <changelog author="msuchanek@suse.com" date="1661342400">- Add fixes since 4.1
  + Fail-testrun-on-test-failure.patch
  + Fix-buffer-overflow-from-sprintf.patch
- Fix tests failing on 32bit architectures
  + Fix-tests-on-32bit.patch</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1686657600">- Add handle-null-return-getstring.patch (bsc#1211889)
  CVE-2023-33461: NULL pointer dereference in iniparser_getboolean()</changelog>
</package>
<package pkgid="a3795ddff7ff52f579f610f8511eb7deb56dd9493c731000f89a2faa697b2d53" name="libitm1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6afad7a1b31a6a4daf88499d98670eae8196c204ee1a493d4ea90e14f057b52c" name="libitm1" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="d9787038311d13e25caafb7239bf22cc1c8338cc419d9e41056e22f4eeb59132" name="libitm1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6d3f733734e3b2f39c568264ac9176a0b3ad6eb47cac6e6229e63752a3f6dc76" name="libitm1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b49c02cdde244f0e3672726e86a15832e6f7bae8e808bbb3687e632beceafc4a" name="libitm1-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9c557464f351fc6e4c46aae3d48daadba8f61434976b185b6b132783d42b869d" name="libitm1-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="552c68090ea787e7b7b0ed1a462b27b460260e3bd8d0f8f58b9ab0cdf4ae7773" name="libjansson" arch="src">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="fe79f9666f336bc186b53de2f994a4a9332f1dc4df5fa00a8afc0ecd4798f5f5" name="libjansson-devel" arch="aarch64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="0e1543a9d2d77b631ab060bbdca92ecf4bea73140661accc3d22ba065940e543" name="libjansson-devel" arch="ppc64le">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="1349dc076313afb15666b659518ae53564e2650083f05e6bb6793942267b0665" name="libjansson-devel" arch="s390x">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="568755d1a28e3126cf72ca641a7ce376df6692498e4ba49c2294a7274d4a6818" name="libjansson-devel" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="84b58c2b91fd59a828cca70a3987ba4f8bc01956278c354ca074671f4c3e4e7a" name="libjansson4" arch="aarch64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="452cc329921f8bf6fae866dfb8a1518e117939c7318a5fce901b3926a15423f2" name="libjansson4" arch="ppc64le">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="71f80b8ef224453ac706429a72de522fcca676e59c5c672d5d0570aef60549fd" name="libjansson4" arch="s390x">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="35363333982837d88078996a0e6b3b410821c8fa405a5870ffb5396ed0277ae1" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="fdb50b075f4ad36d5a0707ac8fe95941759b28df93d286f742a69113b4323cc4" name="libjansson4-32bit" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="5394a09e4106eb7738b14b9fc171de9c6c8143fc55fc4f925d7c1649e4c8eed0" name="libjavascriptcoregtk-4_0-18" arch="aarch64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="28d6de158c8545e7f7bd11dd6799dcca45472c7f34b9f9f3f3c1877d7fb18588" name="libjavascriptcoregtk-4_0-18" arch="ppc64le">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="27ed224d07c2231b1e7a17dd1b1fbde570575001a4abffd1dd621a0ae66fc665" name="libjavascriptcoregtk-4_0-18" arch="s390x">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="889e27fa868169869ada9bbdd5e3c2062836e684ed9e13ee61e8a662491bda6a" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="116236c1c9c361632e412b9085c4f38ef5fd6c5413e4f66911191ef11b5f5260" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="d7502a05be00281c425b9ac4b20cd36fb3f064a02b9e4cbfb3b6b386abe043fa" name="libjavascriptcoregtk-4_1-0" arch="aarch64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="e872bf9a2381fa47e6bfeada957bff3f296214c25c037afa0846bcc3b3630fe3" name="libjavascriptcoregtk-4_1-0" arch="ppc64le">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="902146e198bdb91b07e8346849dd5f246fb3b2575808f6b59d665e5f14f3bcb6" name="libjavascriptcoregtk-4_1-0" arch="s390x">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="778340e21916451850b403d10034c03e78dca9d01cccd52e61cd5d38b8120edf" name="libjavascriptcoregtk-4_1-0" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="91e71267ae0b7187134911c0b39d623a572ddcb2f5b1e4b0a7bb2e2ec663d75e" name="libjavascriptcoregtk-4_1-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="1950336132c4f239facce0e5d9700d9056ca0473172189552255718faebdc467" name="libjavascriptcoregtk-5_0-0" arch="aarch64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="2586e24f76067f2743998e5247f660fa29402bed484c41f06e0977c1f632c71b" name="libjavascriptcoregtk-5_0-0" arch="ppc64le">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="ae836c1db10436aa31e0fe7a36bb4f138f4592afb6bcf26c55d4815bbeaa8533" name="libjavascriptcoregtk-5_0-0" arch="s390x">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="af4608e7b7af6ceb11c8877411b1675f5eb9dd02ee41eccf793835d631bb4e8f" name="libjavascriptcoregtk-5_0-0" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="f72e13e15de34609442a4bbede5f2b3cc06da9daa2d1cc41cc9755267b7f1c02" name="libldap-2_4-2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="b0248b61e57a158917a5381861db3881a5d6c736174a0520dca2c632b3686ba8" name="libldap-2_4-2" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="5c39e355d6aaf6e70b238779f36845916638546f099fe1f462645c797073ce9f" name="libldap-2_4-2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="e65f3bdd8cd68295e244024aec80a7d49343c651c24fa8985394b62902b3af19" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="8b56c9968b5fb156afe40e80f0ded34f593962a5cfe77adb46e9cd82f5683d17" name="libldap-2_4-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="1c1f6e5f07d78dde0216b6e0cf5d1f1d1c39e8c58045a758e8537461a99d0da8" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="c72f0b926c75aac1462e0ea80645f5a0730dabc88aa9e8649f0101f53f3469c9" name="liblsan0" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="360155d158e36979b2f8e3dfd8d2f2e86ba1fc6a4b356448a99b248b14790050" name="liblsan0" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="86174f8895b830a5b12e5a1bac60c6f112f28a824a6e3f535c772dc3dec57706" name="liblsan0" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="2746da5ffe3fffc4e4c86e92c6f4bfa7b031fb78854a07195d5bf1b2192f5e9d" name="liblsan0" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="45b2dc39bf49d9e3aa2539633b55034faeab1154eb5f39610b3a4e1b1d7a3951" name="libluajit-5_1-2" arch="aarch64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="ec554e2943c5bd681134cd60ca14106e0788d728937ee072fef5913bc772976c" name="libluajit-5_1-2" arch="ppc64le">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="325fc2cbcc6d9125bb4ba0e3298df8b22d86a0135022344a1656a89e6bdcd452" name="libluajit-5_1-2" arch="s390x">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="c86893cdd13488984a63a10503098fe396a5c24886bd4134019efc29d54dbdae" name="libluajit-5_1-2" arch="x86_64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="1f0280446cc8ddb915800bdd263695f4d027e3e923f3d3a404ef593b1622c169" name="libluajit-5_1-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="76464114f7192406b61e4e2f78900bce6a6b80322f4262185d412d72e0d6b5e4" name="libmariadbd-devel" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="d2a8c6cc626ff365f717573893172902e8b6db7415656d7fac6d0aa82318e0d2" name="libmariadbd-devel" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="40b00f149ab13877ab736600b04e187ff63d922d0759b270be4f19c192129d79" name="libmariadbd-devel" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="f0534fc75da056962b9fa0fe5f9235a2d2630c0059969fd63237a23b03c8139c" name="libmariadbd-devel" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="16c263d91fb23aa648811e4c9d75523e4583833caeb310852b02fb01c71ec24e" name="libmariadbd-devel" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="9afe62b891871715d5508bb91c8e1b6bd55e69dd2f8abcca21f6613eceff1859" name="libmariadbd-devel" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="688db6cb360830a3e537bc53e52d998f76b8d8e1876f98e339e59c4412ffcf10" name="libmariadbd-devel" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="e603f3997cd771e5877860d7c730b613021c455e1e1bc80ac2b265c663bab7e4" name="libmariadbd-devel" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="6dd3550a8c38525090285a5f1fed2b06d27523b237d9ac5e7a749f9182803725" name="libmariadbd19" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="d5d4815085b641db011f36341fd100ec5d2074c0b2ecaec140f8de65794a8c64" name="libmariadbd19" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="2562ebbd2c39a39e22eca25e346f594c141811eb359993a74d480ab956e78618" name="libmariadbd19" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="80ed73465b4e27e5e24c4d47292d71287daccfae01624206ca9b4d3482d0921a" name="libmariadbd19" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="99ec57453d0ed435fa3f7a769c3ae8fb18d1daaeb4db54456e2e37c439e53231" name="libmariadbd19" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="0f8728249642309d1eb91dcee08074d89b996a96429ad2e2d699aee0becc2554" name="libmariadbd19" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="27fdf43ee7bf25a3e07a59938d83830117615634d5fad188a09ac0d9767ebf0c" name="libmariadbd19" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="99c72f4df755115b46f674ab2606a97f5226caaa5c2dfe137eac34f8f0eed6b0" name="libmariadbd19" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="783e07da67b320b4dc4b0799fab354b388c96c5fbd1ee5504bf68623e4ab4b5e" name="libmlag_pb0" arch="aarch64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="8aa71ab63909253d92973ea0ebe8c9bc10a9860bcff15734e53ab2d64ad3ab55" name="libmlag_pb0" arch="ppc64le">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="49397a6b003ecfa25e6b8297fe334ebd7c63cfdc605179e3bac394af6d3b5a3a" name="libmlag_pb0" arch="s390x">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="d7df0856533728988a514f155caffe78850ffb6a7c3e88f1d2782333cf5ecc93" name="libmlag_pb0" arch="x86_64">
  <version epoch="0" ver="8.4" rel="150500.4.3.1"/>
  <changelog author="mardnh@gmx.de" date="1588766400">- Update to version 7.3.1
  Bugfix/maintenance release
  * Upstream does not provide a changelog</changelog>
  <changelog author="erico.mendonca@suse.com" date="1590926400">- 0001-build-use-configfile-mode-in-init-script.patch: Fix CVE-2020-12831 (boo#1171658).</changelog>
  <changelog author="mardnh@gmx.de" date="1593604800">- Update to version 7.4
  * Upstream does not provide a changelog
- Drop patch (fixed upstream):
  * 0001-build-use-configfile-mode-in-init-script.patch</changelog>
  <changelog author="mt@suse.com" date="1601640000">- add build condition disabling mininet build require by default,
  needed by the optional topology tests.
- removed one occurrence of vrrpd binary listed twice in file list</changelog>
  <changelog author="mardnh@gmx.de" date="1604491200">- Update to version 7.5
  * Upstream does not provide a changelog
- Make grpc support optional and don't enable it by default</changelog>
  <changelog author="rtorreromarijnissen@suse.com" date="1608638400">- Disable ZeroMQ tests due to sporadic timeouts during package builds (bsc#1180217)
  [+ 0001-disable-zmq-test.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1610107200">- Requires libyang 1.0.184</changelog>
  <changelog author="mardnh@gmx.de" date="1614859200">- Update to version 7.5.1
  * Maintenance release
    See: https://github.com/FRRouting/frr/blob/stable/7.5/changelog-auto.in</changelog>
  <changelog author="mt@suse.com" date="1619179200">- Use skip, not xfail in 0001-disable-zmq-test.patch to disable
  zmq test as it is not expected to fail but hangs (bsc#1180217)</changelog>
  <changelog author="jsegitz@suse.com" date="1631793600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_frr.service.patch</changelog>
  <changelog author="linnaea@lavia.moe" date="1633780800">- Update to version 8.0.1
  * refreshed patch:
  - 0001-disable-zmq-test.patch
  - harden_frr.service.patch
  * LDP gained SNMP support
  * OSPFv3 gained VRF support
  * EVPN Multihoming is now fully supported
  * TI-LFA implemented in IS-IS and OSPS
  * New Segment Routing daemon
  * See: https://frrouting.org/release/8.0/
    and https://github.com/FRRouting/frr/releases/tag/frr-8.0.1</changelog>
  <changelog author="jsegitz@suse.com" date="1634299200">- Drop ProtectClock hardening, can cause issues if other device acceess is needed</changelog>
  <changelog author="linnaea@lavia.moe" date="1637150400">- Update to version 8.1
  * Graceful Restart for OSPFv2 and OSPFv3
  * OSPFv3 NSSA and NSSA-TSA support
  * OSPFv3 ASBR Summarisation Support
  * BGP SRv6 and Prefix-SID Type 5 improvements
  * BGP EVPN type-5 gateway IP overlay Index
  * Lua hook support
  * See: https://frrouting.org/release/8.1/</changelog>
  <changelog author="jsegitz@suse.com" date="1639051200">- Add ReadWritePaths=/etc/frr to harden_frr.service.patch (bsc#1181400).</changelog>
  <changelog author="mt@suse.com" date="1646049600">- Apply fix for a buffer overflow in isisd due to the use of strdup
  with a non-zero-terminated binary string (bsc#1196506,CVE-2022-26126)
  [+ 0006-isisd-fix-10505-using-base64-encoding.patch]
- Apply fix for a buffer overflow in isisd due to wrong checks on
  the input packet length (bsc#1196505,CVE-2022-26125) with workaround
  for the GIT binary patch to tests/isisd/test_fuzz_isis_tlv_tests.h.gz
  [+ 0005-isisd-fix-router-capability-TLV-parsing-issues.patch]
- Apply fix for a buffer overflow in babeld due to wrong checks on
  the input packet length in the packet_examin and subtlv parsing
  (bsc#1196504,bsc#1196507,CVE-2022-26128,CVE-2022-26129)
  [+ 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch]
- Apply fix for a heap buffer overflow in babeld due to missing check
  on the input packet length (bsc#1196503,CVE-2022-26127)
  [+ 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1647518400">- Make build a bit cheaper: do only BuildRequire the primary python
  interpreter and its modules (python3-FOO) instead of all
  available versions as done using %{python_module FOO}</changelog>
  <changelog author="mt@suse.com" date="1662379200">- Apply upstream fix for out-of-bounds read in the BGP daemon
  that may lead to information disclosure or denial of service
  (bsc#1202023,CVE-2022-37032)
  [+ 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch]
- Apply upstream fix for a memory leak in the IS-IS daemon that
  may lead to server memory exhaustion (bsc#1202022,CVE-2019-25074)
  [+ 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]</changelog>
  <changelog author="mt@suse.com" date="1668168000">- Migration to /usr/etc: Conditionally moved /etc/logrotate.d/frr
  file to vendor specific directory /usr/etc/logrotate.d and added
  saving of user changed configuration files in /etc and restoring
  them while an RPM update.
- Declare root as sufficient also in the pam account verification;
  without vtysh use causes to log a pam frr:account warnings
  (https://github.com/FRRouting/frr/pull/12308)
  [+ 0005-root-ok-in-account-frr.pam.patch]
- Applied fix removing a not needed backslash causing to log a warning
  (https://github.com/FRRouting/frr/pull/12307)
  [+ 0004-tools-remove-backslash-from-declare-check-regex.patch]
- Applied upstream fixes for frrinit.sh to avoid a privilege escalation
  from frr to root in frr config creation (bsc#1204124,CVE-2022-42917,
  https://github.com/FRRouting/frr/pull/12157).
  [+ 0003-tools-Run-as-FRR_USER-install-chown-commands-to-avoi.patch]
- Removed obsolete patches provided in the 8.4 source archive:
  [- 0003-babeld-fix-10487-by-adding-a-check-on-packet-length.patch,
  - 0004-babeld-fix-10502-10503-by-repairing-the-checks-on-le.patch,
  - 0005-isisd-fix-router-capability-TLV-parsing-issues.patch,
  - 0006-isisd-fix-10505-using-base64-encoding.patch,
  - 0007-bgpd-Make-sure-hdr-length-is-at-a-minimum-of-what-is.patch,
  - 0008-isisd-Ensure-rcap-is-freed-in-error-case.patch]
- Update to version 8.4, see https://frrouting.org/release/8.4/
  * New BGP command (neighbor PEER soo) to configure SoO to prevent
    routing loops and suboptimal routing on dual-homed sites.
  * Command debug bgp allow-martian replaced to bgp allow-martian-nexthop
    because previously we allowed using martian next-hops when debug is
    turned on.
  * Implement BGP Prefix Origin Validation State Extended Community rfc8097
  * Implement Route Leak Prevention and Detection Using Roles in UPDATE
    and OPEN Messages rfc9234
  * BMP L3VPN support
  * PIMv6 support
  * MLD support
  * New command to enable using reserved IPv4 ranges as normal addresses
    for BGP next-hops, interface addresses, etc.
  * As usual, lots of bugs and memory leaks were fixed \m/
    such as a fix for a possible use-after-free due to a race
    condition related to bgp_notify_send_with_data() and
    bgp_process_packet() in bgp_packet.c. This could lead to
    Remote Code Execution or Information Disclosure by sending
    crafted BGP packets (CVE-2022-37035,bsc#1202085).
- Update to version 8.3, see https://frrouting.org/release/8.3/
  * Notification Message support for BGP Graceful Restart
  * BGP Cease Notification Subcode For BFD
  * Send Hold Timer for BGP
  * RFC5424 syslog support
  * PIM passive command
- Update to version 8.2.2, see https://frrouting.org/release/8.2.2/
  * BGP Long-lived graceful restart capability
  * BGP Extended Optional Parameters Length for BGP OPEN Message
  * BGP Extended BGP Administrative Shutdown Communication
  * IS-IS Link State Traffic Engineering support
  * OSPFv3 Support for NSSA Type-7 address ranges
  * PBR VLAN actions support</changelog>
  <changelog author="mt@suse.com" date="1680523200">- Enable pim6d providing PIMv6 support (bsc#1206234)</changelog>
  <changelog author="mt@suse.com" date="1684152000">- Apply upstream fix for denial of service via the bgp_capability_llgr()
  function (bsc#1211248,CVE-2023-31489,gh#FRRouting/frr#13098).
  [+ 0006-bgpd-Check-7-bytes-for-Long-lived-Graceful-Restart-c.patch]
- Apply upstream fix for denial of service via the bgp_attr_psid_sub()
  function (bsc#1211249,CVE-2023-31490,gh#FRRouting/frr#13099).
  [+ 0007-bgpd-Ensure-stream-received-has-enough-data.patch]</changelog>
</package>
<package pkgid="0bdde40c10e6816f7eacc91c66428481cf5de92530041b1721852518a18058bc" name="libnvme" arch="src">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="e8b50d85579f85426d52851b84e0347b8d2232e0a4bbc4e613d54344553bca9b" name="libnvme-devel" arch="aarch64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="452e560141af9149534a50cbc41b55dd4661371599d02dfcfad155d553e2ff92" name="libnvme-devel" arch="ppc64le">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="b3f7868411028aa7a095e32fa1129c2e1cfdfc5823370a4c9628d0e38d896bef" name="libnvme-devel" arch="s390x">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="b326606dad877f08be7ff6b970d9a07756780a74044ee48ce854bf8329d78d6a" name="libnvme-devel" arch="x86_64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="5b0e8ad4530960feebd92e0f8135cbd4c95764f19b33e8cc48ff554d964aaad9" name="libnvme-mi1" arch="aarch64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="9f78529a795597684ee26e7c25d272463a423218c34d72700c4549759e980ae0" name="libnvme-mi1" arch="ppc64le">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="d33aa8606061114a17128868584bbc74a39edcbed7dbd9b4d1624373d9604d20" name="libnvme-mi1" arch="s390x">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="7cd747351d27e56f1f67f93378cb122967643069e97d66d08766dc8d920f4ad2" name="libnvme-mi1" arch="x86_64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="eaf40cb3b719472180266cd61f54b924c5dec51b3e832857678e2cd49454474c" name="libnvme1" arch="aarch64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="30338c083cd27b848791ad1f7de5533cee4f227c9be1e2ac6cc02496d8d78c6b" name="libnvme1" arch="ppc64le">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="dccffca6883777f3e8ee71f1d33113a69e2aa60a66ec6012ad99386d2f843939" name="libnvme1" arch="s390x">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="e3ee4321656e7514b0f8c1a2782fd103043b5c92e59431630a293ffac91b495a" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="e00a592ef71a562d3463d4691c34a32d9c343622cf5d67f2cea0e57eb72c5d32" name="libobjc4" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8bfd03984f4f8187e3a04b0a46d877d4336fbe5224b22d565c9cb892aa8f808e" name="libobjc4" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="1405d79f10cb64a54122777efede3a094720e24a71c322cf7f73083959df3c78" name="libobjc4" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a78ee3ca9124efc0ce5f01129b316107956efc4ff3791aadb64c09e305e6697b" name="libobjc4" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c1a1bc3973a899116b02aaa8c39804d9eb2e4f4b956f6a88747e1e05b25b154f" name="libobjc4-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8ec6ecda43d8e108e6ad007ad2055430f2a537a7da49396b1eb72cbec9795b80" name="libobjc4-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="4aec16565f007301cbee2c7d817de30e5af31b2cc8df6cc94dce6efbe1cf3a0e" name="libopenssl-1_0_0-devel" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="a1a7de312aa06ef8e8e74bb4a0089a054b76c8edd10a71f9c533a752178fef45" name="libopenssl-1_0_0-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="cf8736483f26ab8cc8a856da302c3aa65be9fe81cce957549b77499c6fb56319" name="libopenssl-1_0_0-devel" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="50e277effae8dbdd95cd25d962d8f7f11682f74987c029819396cb73915c91b2" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="fb8f7cec9fce782811237f36f1b55bcf709e845f35c74503628521ecff787dfc" name="libopenssl-1_0_0-devel" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="2792da26b7d3a42cdad5a7dd190922b495dc30ae64a08f8bdbafc5211352e731" name="libopenssl-1_0_0-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="1454053238c31f7bf2e963bd5182a09acaf66df705ab67aef28ccb31ffd2caa9" name="libopenssl-1_0_0-devel" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="176281ecaaeb5244761568cdf2aade3c4cefb26bcf3f0149e4bb075e62494560" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="21391c15c65364bf83deffeecef47bc39a60678a531cd4ee4a9acb650486950b" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="109cddfe7a1690d9ee73100bc0ddc08e1afe1fb703f2f9fc04b8ea7e736a965f" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="85c0ecd5e6bccfa3acaa0f719208dc4748ba13575be499206be6ede5a24324a1" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="c43a22416a9e089b5569fcee4fe9e1b76cb976e1438fc262b2dde719a9a37f91" name="libopenssl-1_1-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="1f6a3b878403af7c532e6a275a362072b711d556ffbc6857076c274e00b229f0" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="f8c7e87d5eeba3298048772bc3e5256f2b6a20f0f186049b036e886d2fcc2c1b" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="d83a1a4ae72edb1e302382ae3ba162b7d4ce7a2da8f30b5dd7b7798bdc0b2249" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="1acb9ac4d134853b2a649904707d3f39de51f5ae9219f4fb9f6124a837efff51" name="libopenssl-3-devel" arch="aarch64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="7771499bb068682f493f9993ebff9b3ef4987531e8281b15e4a4fdbf5fda4c8a" name="libopenssl-3-devel" arch="ppc64le">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="d1996b7d7eee3aebe333c3755f4f8ec88774e0c1506334f8bebee07ea3e71e25" name="libopenssl-3-devel" arch="s390x">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="1e17601750092c59d459add96ebea76aad472787d3a17c3b2296703aabc316d5" name="libopenssl-3-devel" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="45c1fe033dca424852a3614465014be9771f9c15722edeb8e4170f05419ca224" name="libopenssl-3-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="76caffaf9812a227c720c3db134e9e19da54db0193aa31886595557f29a13160" name="libopenssl10" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="131bf710aab8adb6544510817c71ca8415e812798817ea1a1581c737089eb1fb" name="libopenssl10" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="8b7f0055c29c6e19e82e608e339b3f7cd469483de3c2093d4be0867de72ad4d8" name="libopenssl10" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="594ef14dc73ab0b509624910ba5d1143790053ce123b887944143db544bd90a2" name="libopenssl10" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="c294b2c9dbaaf405ceb1c85aec107f1ab348de5c5af0dd431f0828de7e98eb16" name="libopenssl10" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="0f275f74d338b5acf426990b815fcf828be9b7f972d93de37f80b08944a3a435" name="libopenssl10" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="9c2c29bcde82dd6b053d7a42a29ef60eae097e01d4bd0ef2a57274e3afbb44d2" name="libopenssl10" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="64e802054c9eeb1404fcef105233e5a2790ee5bd8bae1ac626b5e75dd2e49190" name="libopenssl10" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="a3724f25b5bfd0d9d78fb370178d261380a1619bc974875c3e4866e9930f3484" name="libopenssl1_0_0" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="2612fbf4a6cce45098204449cd2f5c9ad6a81cc1f84793b1ca3009a7f99f8f8d" name="libopenssl1_0_0" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="d7730429f939ce1273bbc92ab9266a9df3b1e9a6b1eebca8a7c7f83d870dd60c" name="libopenssl1_0_0" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="40ab7b8404f7c549a34432f1277bfe2a4f7e1fbdcbf153989e5064b81ac93919" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="9115c8b799c4d482d5807c3f8ea510d3f55d0ebd45339278f23e5f2b02e17b13" name="libopenssl1_0_0" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="0348987b7248c3ba41e41b6f1878b4116ef2b6dc45c2d169a7f9f02202577892" name="libopenssl1_0_0" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="143b4224f17555d7de3021fc4dfcc3911aff9a58d7ba8444b79fcc8e73c69a90" name="libopenssl1_0_0" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="ca21c2cb0f321265f9ac2579c0c6dd458ae476667cb8f73b3c9f2f23c526caa6" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="4f949aec0b4d1aa3be558947c671608080c595fe226eb9d3fb011f2c94a9b50d" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="f0337e40226cabc3f22336626e506ac32a47626237e2a814667d90cbe9d63a0a" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="3e26bd215f4f58b9089e42c84c2dbb15dfe7d2eaf13df07b36e06b17932ebade" name="libopenssl1_0_0-hmac" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="28f59d6e89525d50db3a11bc31b6c7b8456cd0b8d8052a4d66484219c15feb98" name="libopenssl1_0_0-hmac" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="bb6e0559bb1e678b319e2fff6c7bf1c9d53be68567d6eb962dd7d66817a6af14" name="libopenssl1_0_0-hmac" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="43e68e19fd78372820572ee49b6030ac91e48c30b6fe97e92e051edceeaf3561" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="3d7e71957d25a7fbaf404cf2560f9ed2eddf2da4d1bffd481e4a6b328962ae53" name="libopenssl1_0_0-hmac" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="0731d14562603f3559ecc07c522ad706c8d1de8c5939b68b456ee5bb7305f9d2" name="libopenssl1_0_0-hmac" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="c215e7b162976247496eb736ddffd5ac3b8eb15f73059164ab6178431a457a08" name="libopenssl1_0_0-hmac" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="5d1dcbf3bd98b970d1f87d16bd4e8eefbb856bfbb650a0250697625c780a62da" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="572d23e4b3acc1eefb1a73ebd5fdb8d28875bd3238619d3f61f14b77996e1094" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="0fb7a237b3f227cce898c1eaa5c2d3459da42df2d9e0ae34e0653023dee967d2" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="86e6c5e661f028ec20e6a224872a493921ea5ffe256a2097ed3054d101433b27" name="libopenssl1_0_0-steam" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="eff23c650a139c0c3b7ddce103391d3c401594b927582d59e045af3aeabb066d" name="libopenssl1_0_0-steam" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="847a5a4c9d178151506931b4f5d9c2b573a3ed73240d9be49977420f93876efc" name="libopenssl1_0_0-steam" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="4916fe7c12165b36b4237f6839698d63eeda77d304ae65c8b5ce71f3a5e10fa4" name="libopenssl1_0_0-steam" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="71e4cf69dfd0ef0e200595a63158d63b83e6f4024bb0523999f8615a7b15214b" name="libopenssl1_0_0-steam" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="1fdcd76939d8579489cbf6316927fda3b3292b4663c43a78a0022ed61674d9b8" name="libopenssl1_0_0-steam" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="9b75ae03db213cb65e5667dde27d72079ed7c2a9c5e6be04efbc2450e76e8402" name="libopenssl1_0_0-steam" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="323eee472a608bc6b0626f0c4923dbada01a7091c7288c8ff0606bb0e78a27c1" name="libopenssl1_0_0-steam" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="bae18df4a3060ac1eba6fe238233d49d6ab4f1c787cdad24075878e75c2fe39d" name="libopenssl1_0_0-steam-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="bdeb314724bebeb83d459b17e362908188f40821a475f9947d5a262430bc9c0e" name="libopenssl1_0_0-steam-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="0027a320cc9a87556447670013d54500fc5f9d71507f8d0e109b5cc7d3f3258f" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="e0776f3efbc81f20488a740d06fac9bda9a2b0b8652bd6977a57b5b8be3fc421" name="libopenssl1_1" arch="ppc64le">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="fe6c54cda077ba2446e38908c827109875050b521ab3f2d680595f242d4db031" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="cf72afda4e48721c0878bca704359b24b3537a65e01f9e00a0b84bf93b389204" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="3e270ddf33006ccbc9f8991c0baaab7b275a1dce1ed096988166735b27866bbc" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="aada12eef60235b06549f754243c489ffc899ea8667b9ba810293c7c5eff7e40" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="186110315f4a7ca9b4074c81db10a1b73053cfd43de8ea66c01fc8fce876fca0" name="libopenssl1_1-hmac" arch="ppc64le">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="d7807b652ac065e32ef5801fdcca7cd3e3424960b53c2f47b363e86e70574624" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="ac26a859320cf5dd328aeb640b7984fc0e56c932ef9312e787b489cd54837b9e" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="d96b3c13859c6c550ba06623240ed4d8a96865ce06fd885a4cf1107ba367f15d" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="d8000db94e1e0e9a13dd1ba57d4e7b944bd468d114722dd7ec95ceddacba6a8f" name="libopenssl3" arch="aarch64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="4e0d4afb10174453149b1a87eb69949b1136803358519584af67cbfcf78e749f" name="libopenssl3" arch="ppc64le">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="e2dd933578f9ecc48f5d14cfc14f633e2969f06470101661698fcf52383d273b" name="libopenssl3" arch="s390x">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="bfc4dfa02f93109822a0aba64f79ec76c8d7da036d49128a90a9253da08c4b78" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="10b4bdeee5ec38fddb0cc12eabf85cff5d0b900b403d65ad46e63f927cc6f6c9" name="libopenssl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="e6b68430717d90f200f102133f71867bfca71e0e9d3c7b136a4541e06ddaf919" name="libopenvswitch-2_14-0" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f7c8e4902707a4f6ae49cdea692432d982efabae1dfaff5c30800293952188cf" name="libopenvswitch-2_14-0" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f170bcdb28e456040640016de09dd88752b2aa53ba6653220fcaa83df7e19606" name="libopenvswitch-2_14-0" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="e95c6ff687a811c59ab1ef270b9d8b34f78385afc087483b7bb460940fc9a4d9" name="libopenvswitch-2_14-0" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="1c4b8ac74dea2eecb5c766ff4ecd33af4f249b1cac9cb5fbbe10ef48edfeb111" name="libopenvswitch-3_1-0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="d2c9b97962589a735d9afed6477d1b71b5e707459a8c65503e322c34656f45eb" name="libopenvswitch-3_1-0" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="7a4ded7b018e18d1ae1f2fece1d7fecf9e062ac85716d673f288f9c95b50de25" name="libopenvswitch-3_1-0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="1a533f0d7a2bc85f9bbd326c6029ebff3e76df1de25bf9110d1653dc934697cc" name="libopenvswitch-3_1-0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="1b34a797c10dbcb622d3430f35d38b3bddbd0122e3c89beb63207ce3226e4f1f" name="libovn-20_06-0" arch="aarch64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="98ed768a20b62e043e7c766fb5af94f7fb780c174af72274ef05888d64f805ed" name="libovn-20_06-0" arch="ppc64le">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="938098b4d56bc03807ca7df4a3768622beefd011ed4f1205492113526ced74bf" name="libovn-20_06-0" arch="s390x">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="5a28e759d172b47b0ab73b8308aeebad2168278f1af980c4edf82ef954530beb" name="libovn-20_06-0" arch="x86_64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="b10956f8fec174bbe96c60d27667fd2b544ba13abd6c50a857416e678b327d7a" name="libovn-23_03-0" arch="aarch64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="53954bc4bea6c19a8f0e417f3f1a404d0319587e59822c540b61b77f2eca9004" name="libovn-23_03-0" arch="ppc64le">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="2b751f01c96ac1b229c0e232d6784d0a238917c056e6b6bc32b849ef12609e9f" name="libovn-23_03-0" arch="s390x">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="56f5da7d0f663e08d40d603c2b9ac0b0bec172743802826201dcdcfa50954089" name="libovn-23_03-0" arch="x86_64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="1c7acf8e437af01d4809f7c757bdb6600bef4613e81596ef30af2a050a39b8c0" name="libprotobuf-lite20" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="c4206bc5286dcf7bc14c824e9eda198ce0459388405b2f4c7b1fe9746e222e36" name="libprotobuf-lite20" arch="ppc64le">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="41475a2c85efe819d08457d4436cd51420b1c107afae0f4f3128889f7b15ee86" name="libprotobuf-lite20" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="3e36d9fbf8a5482764e73f7f1999c480e3a4f4831f6ea6706354dfc703e8d600" name="libprotobuf-lite20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="7e3e95b2d33483749c97b78d56c340c4b8e8bb6fc9db885c7ce03348d7cd85d5" name="libprotobuf-lite20-32bit" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="a2e5995e1f18a3361db08fced849989e68256f75136a9fe73e3acc955501746a" name="libprotobuf20" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="abcc06155bc55d01985567c6c7f8a3ab693b54bc3098b1ac143d2a40027c37fe" name="libprotobuf20" arch="ppc64le">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="9e9e9a762f1b91af3a5fd6e80804299c546d215ad8d6ce3fc950c624181d600d" name="libprotobuf20" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="d1d9c05db5ba87e7a86bd32b22217736cdccf0e6a059f75f93642324343fdbfa" name="libprotobuf20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="8ca0f660528901173528636eff1445b32072b098bf616580ebfc1db4cc6e8b3e" name="libprotobuf20-32bit" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="7446e8b978ffb0832f1e60783530c9c8f090b082611732495e1f58fae431885b" name="libprotoc20" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="36f827ce7f714f16b29f16dc4c86677713b2912af5da97426570c9a7c0e48410" name="libprotoc20" arch="ppc64le">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="9bd64d63a32f18e3b7bff4a5e5f0ef46a3ab56072ac9a0ee49bbe5c2a3771575" name="libprotoc20" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="5acc96afbf211f73f1fc07bb0017bca4f62ef397c618cd8d295c1e5e522c67f4" name="libprotoc20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="74dbe96a236cc0aa7fc64aaf6a342c7bba835fd3356a574934291d4e51d1d41a" name="libprotoc20-32bit" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="626133f93a73c1e0d43e3bc4e40e284c84dd00214fe2d51801ac489f127fd8b9" name="libpsx2" arch="aarch64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="155b98b823e6ed6264308086590d974ab5380625ee1df6c76a0d0d6234b7fd8a" name="libpsx2" arch="ppc64le">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="b1bc50b46f5c8880654c480fb5d6d5a9a72a4c25101982acfbd52927cb0e85ef" name="libpsx2" arch="s390x">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="de1b1987b6cd9f83b89e555d57680b66e1dbf2abdae8b9d678bafb6b1dbfc900" name="libpsx2" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="d2e5348e0c4c53627746cf6a05bbe2c96209530ceb89dd6369818fae29bedced" name="libpsx2-32bit" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="aa4c3912dad88df36aeadf5c9802c8d44c319c9218bd5d4cc0258ed499c3a5c7" name="libpulp" arch="src">
  <version epoch="0" ver="0.3.0" rel="150400.3.20.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1636718400">- Update libpulp with ulp_apply in trigger.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1643371200">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix --revert-all when no wildcards are provided.
- Fix batch processing of .rev files.
- Disable lto when building libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645012800">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix a bug which causes the ulp tool to fail if itself was loaded with libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645531200">- Update package with libpulp-0.1.1 (jsc#SLE-20049).
- Add new command `ulp livepatchable` to check if a library is livepatchable.</changelog>
  <changelog author="lpechacek@suse.com" date="1648209600">- Add patch build macros and deployment scripts. (jsc#SLE-20049)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1648641600">- Update package with libpulp-0.2.0 (jsc#SLE-20049).
- Embed metadata (.ulp) into livepatch container (.so).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1649764800">- Update package with libpulp-0.2.1 (jsc#SLE-20049).
- Fix base address load of non-library variables in target process.
- Dump references information on `ulp dump`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1651492800">- Update package with libpulp-0.2.2 (jsc#SLE-20049).
- Use colored output by default (disable with --color=no)
- Packer now reports errors in .dsc in a GCC 5+ fashion.
- Trigger now has a summarized mode (disable with -v)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1652356800">- Update package with libpulp-0.2.3 (jsc#SLE-20049).
- Add support for endbr64 instructions on function beginning.
- Fix use-after-free bug.
- Fix compilation in Tumbleweed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655121600">- Update package with libpulp-0.2.4.
- Fix dlsym interposition changing program behaviour (bsc#1200129)
- Fix free call of mmap'ed buffers (bsc#1200129)
- Fix error message when user has no permission to open livepatch.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655985600">- Fix ulp tool crashing on high process count (bsc#1200316).
- Avoid parsing /proc/&lt;pid&gt;/comm when not needed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1656072000">- Fix ulp tool not patching on high process count (bsc#1200316).
- Implement a timeout feature in case of deadlocks.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1660824000">- Update package with libpulp-0.2.5.
  * Fix ulp tool not patching on highly stressed environments. The reason behind
    it is that a 10s timeout was not enough depending of how stressed the
    machine is. Worse cases when libpulp is running in a VM (bsc#1200316).
  * Fix HANA testcase failures (bsc#1200129).
  * Add support for searching for patches recursively. Previous versions only
    searched on the path specified, ignoring subdirectories.
  * Improve patching performance. Previous version took up to 20s ~ 25s to
    patch 4000 processes. This version reduces this time to 6s. The way this
    is done is reducing ptrace calls and switching to process_vm_readv/writev
    when possible, and moving process discovery to a different thread.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1668081600">- Update package with libpulp-0.2.6
  * Add new `-R` option to specify a prefix root for livepatches
    (jsc#PED-1078).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1672660800">- Update package with libpulp-0.2.7:
  * Add support to library to JSON library dumps, Removing any requirement of
    adding the original library .so file into the livepatch build tarball.
  * Update the ulp post hook script for transactional systems (jsc#PED-1078).
  * Add `setup_package.sh` as part of libpulp tools.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1677153600">- Update package with libpulp-0.2.8:
  * Minor code refactoring.
  * Fixed a bug where libpulp rejected correct ELF files as library input.
  * Fixed a file descriptor leak when -check-stack is passed to ulp.
  * Fixed a bug where ulp did not shown libcrypto.so.1.1 as a livepatchable library (bsc#1208575)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678363200">- Update package with libpulp-0.2.9:
  * Add mechanism to enable or disable livepatching based or environment variables
    and in the new command `ulp set_patchable` (jsc#PED-2877).
  * Change `patch already applied` message from error to skipped.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1681387200">- Update package with libpulp-0.2.10:
  * Fix typo which makes write_bytes fallback to ptrace mode when vm_writev is
    available.
  * Detect when mprotect is blocked by seccomp (process launched by systemd,
    for example) and disable livepatching in the process (bsc#1210224,
    jsc#PED-2877).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1686916800">- Update package with libpulp-0.2.11:
  * Avoid warning on symbol read of processes which user do not have access.
  * Fix a bug in livepatch installation counting.
  * Fix a warning message of library not loaded when reverting all patches when
    the library is loaded.
  * Fix a crash when `patches` is called with invalid PID.
  * Enable batch processing for patching a single process via PID.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1687867200">- Update package with libpulp-0.3.0:
  * Add support for processes with blocked mprotect (process launched by
    systemd, for example) (bsc#1210224, jsc#PED-2877).
  * Add support for processes which chroots into /proc.
  * Supports livepathcing all processes in SLE.</changelog>
</package>
<package pkgid="0e0ba91b42f25f4816f613ac95f6110e98f250b40e74766c5a31e8d4ee792202" name="libpulp-tools" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="150400.3.20.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1636718400">- Update libpulp with ulp_apply in trigger.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1643371200">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix --revert-all when no wildcards are provided.
- Fix batch processing of .rev files.
- Disable lto when building libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645012800">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix a bug which causes the ulp tool to fail if itself was loaded with libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645531200">- Update package with libpulp-0.1.1 (jsc#SLE-20049).
- Add new command `ulp livepatchable` to check if a library is livepatchable.</changelog>
  <changelog author="lpechacek@suse.com" date="1648209600">- Add patch build macros and deployment scripts. (jsc#SLE-20049)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1648641600">- Update package with libpulp-0.2.0 (jsc#SLE-20049).
- Embed metadata (.ulp) into livepatch container (.so).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1649764800">- Update package with libpulp-0.2.1 (jsc#SLE-20049).
- Fix base address load of non-library variables in target process.
- Dump references information on `ulp dump`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1651492800">- Update package with libpulp-0.2.2 (jsc#SLE-20049).
- Use colored output by default (disable with --color=no)
- Packer now reports errors in .dsc in a GCC 5+ fashion.
- Trigger now has a summarized mode (disable with -v)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1652356800">- Update package with libpulp-0.2.3 (jsc#SLE-20049).
- Add support for endbr64 instructions on function beginning.
- Fix use-after-free bug.
- Fix compilation in Tumbleweed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655121600">- Update package with libpulp-0.2.4.
- Fix dlsym interposition changing program behaviour (bsc#1200129)
- Fix free call of mmap'ed buffers (bsc#1200129)
- Fix error message when user has no permission to open livepatch.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655985600">- Fix ulp tool crashing on high process count (bsc#1200316).
- Avoid parsing /proc/&lt;pid&gt;/comm when not needed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1656072000">- Fix ulp tool not patching on high process count (bsc#1200316).
- Implement a timeout feature in case of deadlocks.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1660824000">- Update package with libpulp-0.2.5.
  * Fix ulp tool not patching on highly stressed environments. The reason behind
    it is that a 10s timeout was not enough depending of how stressed the
    machine is. Worse cases when libpulp is running in a VM (bsc#1200316).
  * Fix HANA testcase failures (bsc#1200129).
  * Add support for searching for patches recursively. Previous versions only
    searched on the path specified, ignoring subdirectories.
  * Improve patching performance. Previous version took up to 20s ~ 25s to
    patch 4000 processes. This version reduces this time to 6s. The way this
    is done is reducing ptrace calls and switching to process_vm_readv/writev
    when possible, and moving process discovery to a different thread.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1668081600">- Update package with libpulp-0.2.6
  * Add new `-R` option to specify a prefix root for livepatches
    (jsc#PED-1078).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1672660800">- Update package with libpulp-0.2.7:
  * Add support to library to JSON library dumps, Removing any requirement of
    adding the original library .so file into the livepatch build tarball.
  * Update the ulp post hook script for transactional systems (jsc#PED-1078).
  * Add `setup_package.sh` as part of libpulp tools.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1677153600">- Update package with libpulp-0.2.8:
  * Minor code refactoring.
  * Fixed a bug where libpulp rejected correct ELF files as library input.
  * Fixed a file descriptor leak when -check-stack is passed to ulp.
  * Fixed a bug where ulp did not shown libcrypto.so.1.1 as a livepatchable library (bsc#1208575)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678363200">- Update package with libpulp-0.2.9:
  * Add mechanism to enable or disable livepatching based or environment variables
    and in the new command `ulp set_patchable` (jsc#PED-2877).
  * Change `patch already applied` message from error to skipped.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1681387200">- Update package with libpulp-0.2.10:
  * Fix typo which makes write_bytes fallback to ptrace mode when vm_writev is
    available.
  * Detect when mprotect is blocked by seccomp (process launched by systemd,
    for example) and disable livepatching in the process (bsc#1210224,
    jsc#PED-2877).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1686916800">- Update package with libpulp-0.2.11:
  * Avoid warning on symbol read of processes which user do not have access.
  * Fix a bug in livepatch installation counting.
  * Fix a warning message of library not loaded when reverting all patches when
    the library is loaded.
  * Fix a crash when `patches` is called with invalid PID.
  * Enable batch processing for patching a single process via PID.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1687867200">- Update package with libpulp-0.3.0:
  * Add support for processes with blocked mprotect (process launched by
    systemd, for example) (bsc#1210224, jsc#PED-2877).
  * Add support for processes which chroots into /proc.
  * Supports livepathcing all processes in SLE.</changelog>
</package>
<package pkgid="0818a25ba9d36ad657e0c6a6d30e081cbb8dc975b0047baba4698bb7a4612334" name="libpulp0" arch="x86_64">
  <version epoch="0" ver="0.3.0" rel="150400.3.20.1"/>
  <changelog author="giuliano.belinassi@suse.com" date="1636718400">- Update libpulp with ulp_apply in trigger.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1643371200">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix --revert-all when no wildcards are provided.
- Fix batch processing of .rev files.
- Disable lto when building libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645012800">- Update package with newest libpulp features (jsc#SLE-20049).
- Fix a bug which causes the ulp tool to fail if itself was loaded with libpulp.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1645531200">- Update package with libpulp-0.1.1 (jsc#SLE-20049).
- Add new command `ulp livepatchable` to check if a library is livepatchable.</changelog>
  <changelog author="lpechacek@suse.com" date="1648209600">- Add patch build macros and deployment scripts. (jsc#SLE-20049)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1648641600">- Update package with libpulp-0.2.0 (jsc#SLE-20049).
- Embed metadata (.ulp) into livepatch container (.so).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1649764800">- Update package with libpulp-0.2.1 (jsc#SLE-20049).
- Fix base address load of non-library variables in target process.
- Dump references information on `ulp dump`.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1651492800">- Update package with libpulp-0.2.2 (jsc#SLE-20049).
- Use colored output by default (disable with --color=no)
- Packer now reports errors in .dsc in a GCC 5+ fashion.
- Trigger now has a summarized mode (disable with -v)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1652356800">- Update package with libpulp-0.2.3 (jsc#SLE-20049).
- Add support for endbr64 instructions on function beginning.
- Fix use-after-free bug.
- Fix compilation in Tumbleweed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655121600">- Update package with libpulp-0.2.4.
- Fix dlsym interposition changing program behaviour (bsc#1200129)
- Fix free call of mmap'ed buffers (bsc#1200129)
- Fix error message when user has no permission to open livepatch.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1655985600">- Fix ulp tool crashing on high process count (bsc#1200316).
- Avoid parsing /proc/&lt;pid&gt;/comm when not needed.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1656072000">- Fix ulp tool not patching on high process count (bsc#1200316).
- Implement a timeout feature in case of deadlocks.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1660824000">- Update package with libpulp-0.2.5.
  * Fix ulp tool not patching on highly stressed environments. The reason behind
    it is that a 10s timeout was not enough depending of how stressed the
    machine is. Worse cases when libpulp is running in a VM (bsc#1200316).
  * Fix HANA testcase failures (bsc#1200129).
  * Add support for searching for patches recursively. Previous versions only
    searched on the path specified, ignoring subdirectories.
  * Improve patching performance. Previous version took up to 20s ~ 25s to
    patch 4000 processes. This version reduces this time to 6s. The way this
    is done is reducing ptrace calls and switching to process_vm_readv/writev
    when possible, and moving process discovery to a different thread.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1668081600">- Update package with libpulp-0.2.6
  * Add new `-R` option to specify a prefix root for livepatches
    (jsc#PED-1078).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1672660800">- Update package with libpulp-0.2.7:
  * Add support to library to JSON library dumps, Removing any requirement of
    adding the original library .so file into the livepatch build tarball.
  * Update the ulp post hook script for transactional systems (jsc#PED-1078).
  * Add `setup_package.sh` as part of libpulp tools.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1677153600">- Update package with libpulp-0.2.8:
  * Minor code refactoring.
  * Fixed a bug where libpulp rejected correct ELF files as library input.
  * Fixed a file descriptor leak when -check-stack is passed to ulp.
  * Fixed a bug where ulp did not shown libcrypto.so.1.1 as a livepatchable library (bsc#1208575)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1678363200">- Update package with libpulp-0.2.9:
  * Add mechanism to enable or disable livepatching based or environment variables
    and in the new command `ulp set_patchable` (jsc#PED-2877).
  * Change `patch already applied` message from error to skipped.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1681387200">- Update package with libpulp-0.2.10:
  * Fix typo which makes write_bytes fallback to ptrace mode when vm_writev is
    available.
  * Detect when mprotect is blocked by seccomp (process launched by systemd,
    for example) and disable livepatching in the process (bsc#1210224,
    jsc#PED-2877).</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1686916800">- Update package with libpulp-0.2.11:
  * Avoid warning on symbol read of processes which user do not have access.
  * Fix a bug in livepatch installation counting.
  * Fix a warning message of library not loaded when reverting all patches when
    the library is loaded.
  * Fix a crash when `patches` is called with invalid PID.
  * Enable batch processing for patching a single process via PID.</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1687867200">- Update package with libpulp-0.3.0:
  * Add support for processes with blocked mprotect (process launched by
    systemd, for example) (bsc#1210224, jsc#PED-2877).
  * Add support for processes which chroots into /proc.
  * Supports livepathcing all processes in SLE.</changelog>
</package>
<package pkgid="583b8df9d7fb51267e12e80c460743b0ef9c3ddbf29f288fbf77a7e2ab1a3a27" name="libpython3_10-1_0" arch="aarch64">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="f3224bea626910c98a653b6ac1e3642d7d74d26d48f8b0665cfaa7fccaea2f4e" name="libpython3_10-1_0" arch="ppc64le">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="9c38ef78624e88a4c1cae38558f84c25ffdd4d34efb77c66d4693054cb39b0e2" name="libpython3_10-1_0" arch="s390x">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="f0f049695a3a9548cb9f0b6a8b47f69035dbdeb9fa8fadce0e85ba214aa61efe" name="libpython3_10-1_0" arch="x86_64">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="96baee89f9148bdd68787d9dd82a1ff1d0d50c77a9e3dbcfca9fa5eeba11417b" name="libpython3_10-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="52611c2ae3e1cfe7800acadc1c373a5f322b30a3ed58f62255b4be459bcc9d86" name="libpython3_11-1_0" arch="aarch64">
  <version epoch="0" ver="3.11.3" rel="150400.9.12.1"/>
  <changelog author="mcepl@suse.com" date="1657800000">- Update to 3.11.0b4:
- Fixes many bugs and adds following more significant changes
- Security
  - gh-68966: The deprecated mailcap module now refuses to inject
    Coreunsafe text (filenames, MIME types, parameters) into
    shell Corecommands. Instead of using such text, it will
    warn and act Coreas if a match was not found (or for test
    commands, as if the Coretest failed). and Builtins
  - gh-93516: Lazily create a table mapping bytecode offsets to
    line numbers to speed up calculation of line numbers when
    tracing.
  - gh-93461: importlib.invalidate_caches() now drops entries
    from sys.path_importer_cache with a relative path as
    name. This solves a caching issue when a process changes its
    current working directory.
  - FileFinder no longer inserts a dot in the path, e.g.
    /egg/./spam is now /egg/spam.
  Library
  - gh-93896: Fix asyncio.run() and
    unittest.IsolatedAsyncioTestCase to always the set event loop
    as it was done in Python 3.10 and earlier. Patch by Kumar
    Aditya.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  Tools/Demos
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  C API
  - gh-93937: The following frame functions and type are now
    directly available with #include &lt;Python.h&gt;, it’s no longer
    needed to add #include &lt;frameobject.h&gt;:
    PyFrame_Check()
    PyFrame_GetBack()
    PyFrame_GetBuiltins()
    PyFrame_GetGenerator()
    PyFrame_GetGlobals()
    PyFrame_GetLasti()
    PyFrame_GetLocals()
    PyFrame_Type</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="mcepl@suse.com" date="1658836800">- Update to 3.11.0b5:
  - Core and Builtins
  - gh-93351: ast.AST node positions are now validated when
    provided to compile() and other related functions. If
    invalid positions are detected, a ValueError will be
    raised.
  - gh-94438: Fix an issue that caused extended opcode
    arguments and some conditional pops to be ignored when
    calculating valid jump targets for assignments to the
    f_lineno attribute of frame objects. In some cases, this
    could cause inconsistent internal state, resulting in a
    hard crash of the interpreter.
  - gh-95060: Undocumented PyCode_Addr2Location function now
    properly returns when addrq argument is less than zero.
  - gh-95113: Replace all EXTENDED_ARG_QUICK instructions
    with basic EXTENDED_ARG instructions in unquickened
    code. Consumers of non-adaptive bytecode should be able to
    handle extended arguments the same way they were handled in
    CPython 3.10 and older.
  - gh-91409: Fix incorrect source location info caused by
    certain optimizations in the bytecode compiler.
  - gh-94036: Fix incorrect source location info for some
    multi-line attribute accesses and method calls.
  - gh-94739: Allow jumping within, out of, and across
    exception handlers in the debugger.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than (3,
    9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than (3,
    8). Patch by Shantanu Jain.
  - gh-91256: Ensures the program name is known for help text
    during interpreter startup.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-94822: Fix an issue where lookups of metaclass
    descriptors may be ignored when an identically-named
    attribute also exists on the class itself.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-90699: Fix reference counting bug in
    bool.__repr__(). Patch by Kumar Aditya.
  - Library
  - gh-95087: Fix IndexError in parsing invalid date in the
    email module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-95132: Fix a sqlite3 regression where *args and **kwds
    were incorrectly relayed from connect() to the Connection
    factory. The regression was introduced in 3.11a1 with PR
    24421 (gh-85128). Patch by Erlend E. Aasland.`
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-95105: wsgiref.types.InputStream.__iter__() should
    return Iterator[bytes], not Iterable[bytes]. Patch by
    Shantanu Jain.
  - gh-94857: Fix refleak in
    _io.TextIOWrapper.reconfigure. Patch by Kumar Aditya.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - bpo-47025: Drop support for bytes on sys.path.
  - Tests
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - Build
  - gh-94847: Fixed _decimal module build issue on GCC when
    compiling with LTO and pydebug. Debug builds no longer
    force inlining of functions.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-94801: configure now uses custom flags like ZLIB_CFLAGS
    and ZLIB_LIBS when searching for headers and libraries.
  - gh-94773: deepfreeze.py now supports code object with
    frozensets that contain incompatible, unsortable types.
  - C API
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
  - gh-94731: Python again uses C-style casts for
    most casting operations when compiled with
    C++. This may trigger compiler warnings, if they
    are enabled with e.g. -Wold-style-cast `` or
    ``-Wzero-as-null-pointer-constant options for g++.</changelog>
  <changelog author="mcepl@suse.com" date="1660996800">- Update to 3.11.0rc1:
  - Core and Builtins
  - Update code object hashing and equality to consider all
    debugging and exception handling tables. This fixes an
    issue where certain non-identical code objects could be
    “deduplicated” during compilation.
  - _PyPegen_Parser_New now properly detects token memory
    allocation errors. Patch by Honglin Zhu.
  - Run Python code in tracer/profiler function at full
    speed. Fixes slowdown in earlier versions of 3.11.
  - Emit a warning in debug mode if an object does not call
    PyObject_GC_UnTrack() before deallocation. Patch by Pablo
    Galindo.
  - Prevented crashes in the AST constructor when
    compiling some absurdly long expressions like
    "+0"*1000000. RecursionError is now raised instead. Patch
    by Pablo Galindo
  - ast.AST node positions are now validated when provided to
    compile() and other related functions. If invalid positions
    are detected, a ValueError will be raised.
  - Fix error detection in some builtin functions when keyword
    argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - Library
  - Update bundled pip to 22.2.2.
  - Fix asyncio.TaskGroup to propagate exception when
    asyncio.CancelledError was replaced with another exception
    by a context manger. Patch by Kumar Aditya and Guido van
    Rossum.
  - Update bundled pip to 22.2.1.
  - Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - Fix asyncio.run() for asyncio.Task implementations without
    uncancel() method. Patch by Kumar Aditya.
  - Fix check for existence of os.EFD_CLOEXEC, os.EFD_NONBLOCK
    and os.EFD_SEMAPHORE flags on older kernel versions where
    these flags are not present. Patch by Kumar Aditya.
  - Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - Ensure that timeouts scheduled with asyncio.Timeout that
    have already expired are delivered promptly.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix findtext in the xml module to only give an empty string
    when the text attribute is set to None.
  - Documentation
  - Fix stylesheet not working in Windows CHM htmlhelp docs
    and add warning that they are deprecated. Contributed by
    C.A.M. Gerlach.
  - Update library documentation with availability information
    on WebAssembly platforms wasm32-emscripten and wasm32-wasi.
  - Use consistent syntax for platform availability. The
    directive now supports a content body and emits a warning
    when it encounters an unknown platform.
  - Document a limitation in ThreadPoolExecutor where its exit
    handler is executed before any handlers in atexit.
  - Tests
  - Lib/test/test_asyncio/test_ssl.py exposed a bug in the
    macOS kernel where intense concurrent load on non-blocking
    sockets occasionally causes errno.ENOBUFS (“No buffer space
    available”) to be emitted. FB11063974 filed with Apple, in
    the mean time as a workaround buffer size used in tests on
    macOS is decreased to avoid intermittent failures. Patch by
    Fantix King.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - Add a regression test for re exponentional slowdown when
    using rjsmin.
  - Build
  - Fix a regression in configure script that caused some
    header checks to ignore custom CPPFLAGS. The regression was
    introduced in gh-94802.
  - wasm32-wasi builds no longer depend on WASIX’s pthread
    stubs. Python now has its own stubbed pthread API.
  - Python now detects missing dup function in WASI and works
    around some missing errno, select, and socket constants.
  - Python now skips missing socket functions and methods on
    WASI. WASI can only create sockets from existing fd /
    accept and has no netdb.
  - Platforms wasm32-unknown-emscripten and wasm32-unknown-wasi
    have been promoted to PEP 11 tier 3 platform support.
  - IDLE
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).
  - Fix the Shell context menu copy-with-prompts bug of copying
    an extra line when one selects whole lines.
  - In the Edit menu, move Select All and add a new separator.
  - Enable using IDLE’s module browser with .pyw files.
  - Add .pyi as a recognized extension for IDLE on macOS. This
    allows opening stub files by double clicking on them in the
    Finder.
  - C API
  - Restore the 3.10 behavior for multiple inheritance of C
    extension classes that store their dictionary at the end of
    the struct.
  - Added PyCode_GetVarnames(), PyCode_GetCellvars() and
    PyCode_GetFreevars() for accessing co_varnames, co_cellvars
    and co_freevars respectively via the C API.</changelog>
  <changelog author="mcepl@suse.com" date="1660996801">- fix import_failed.map to refer to the python 3.11 package versions</changelog>
  <changelog author="schwab@suse.de" date="1662379200">- Increase testsuite timeout for test_freeze_simple_script</changelog>
  <changelog author="mcepl@suse.com" date="1663243200">- Update to 3.11.0rc2:
  - Converting between int and str in bases other than 2
    (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base
    10 (decimal) now raises a ValueError if the number of digits
    in string form is above a limit to avoid potential denial of
    service attacks due to the algorithmic complexity. This is
    a mitigation for CVE-2020-10735.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Fix case of undefined behavior in ceval.c
  - Do not expose KeyWrapper in _functools.
  - Ensure that tracing, sys.setrace(), is turned on
    immediately. In pre-release versions of 3.11, some tracing
    events might have been lost when turning on tracing in a
    __del__ method or interrupt.
  - Fix use after free in trace refs build mode. Patch by Kumar
    Aditya.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Make sure that incomplete frames do not show up in
    tracemalloc traces.
  - Remove two cases of undefined behavior, by adding NULL
    checks.
  - Fix possible NULL pointer dereference in
    _PyThread_CurrentFrames. Patch by Kumar Aditya.
  - Fix AttributeError missing name and obj attributes in
    object.__getattribute__(). Patch by Philip Georgi.
  - Loading a file with invalid UTF-8 will now report the broken
    character at the correct location.
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes. Patch by Pablo Galindo
  - Fix a deadlock in PyGILState_Ensure() when allocating new
    thread state. Patch by Kumar Aditya.
  - PyType_Ready() now initializes ht_cached_keys and performs
    additional checks to ensure that type objects are properly
    configured. This avoids crashes in 3rd party packages that
    don’t use regular API to create new types.
  - Skip over incomplete frames in PyThreadState_GetFrame().
  - Fix format string in _PyPegen_raise_error_known_location that
    can lead to memory corruption on some 64bit systems. The
    function was building a tuple with i (int) instead of n
    (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - Fix incorrect error message in the io module.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL. Patch by Victor Stinner.
  - Correct conversion of numbers.Rational’s to float.
  - Fix TypeVarTuple.__typing_prepare_subst__. TypeError was not
    raised when using more than one TypeVarTuple, like [*T, *V]
    in type alias substitutions.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Fix incorrect condition that causes sys.thread_info.name to
    be wrong on pthread platforms.
  - Remove an incompatible change from bpo-28080 that caused a
    regression that ignored the utf8 in ZipInfo.flag_bits. Patch
    by Pablo Galindo.
  - Fix asyncio.Runner to call asyncio.set_event_loop() only
    once to avoid calling attach_loop() multiple times on child
    watchers. Patch by Kumar Aditya.
  - Fix unittest.IsolatedAsyncioTestCase to set event loop before
    calling setup functions. Patch by Kumar Aditya.
  - When a task catches asyncio.CancelledError and raises some
    other error, the other error should generally not silently be
    suppressed.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on a
    Linux kernel with FIPS enabled.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks. Patch by Kumar Aditya.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from the
    lower level threading and multiprocessing modules.
  - What’s New 3.11 now has instructions for how to provide
    compiler and linker flags for Tcl/Tk and OpenSSL on RHEL 7
    and CentOS 7.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing. Patch by Ross Burton.
  - Build and test with OpenSSL 1.1.1q
- Use support-expat-CVE-2022-25236-patched.patch from the current
  version of gh#python/cpython#93900 instead of the old
  support-expat-245.patch.
- Reapply fix_configure_rst.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1666699200">- Update to 3.11.0 (overall changes from 3.10.*):
  - General changes
  - PEP 657 -- Include Fine-Grained Error Locations in
    Tracebacks
  - PEP 654 -- Exception Groups and except*
  - PEP 680 -- tomllib: Support for Parsing TOML in the
    Standard Library
  - gh-90908 -- Introduce task groups to asyncio
  - gh-34627 -- Atomic grouping ((?&gt;...)) and possessive
    quantifiers (*+, ++, ?+, {m,n}+) are now supported in
    regular expressions.
  - The Faster CPython Project is already yielding some
    exciting results. Python 3.11 is up to 10-60% faster than
    Python 3.10. On average, we measured a 1.22x speedup on the
    standard benchmark suite. See Faster CPython for details.
  - Typing and typing language changes
  - PEP 673 -- Self Type
  - PEP 646 -- Variadic Generics
  - PEP 675 -- Arbitrary Literal String Type
  - PEP 655 -- Marking individual TypedDict items as required
    or potentially-missing
  - PEP 681 -- Data Class Transforms
- (just changes from 3.11.0rc2):
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size. Issue reported by Jordan Limor. Patch by
    Victor Stinner.
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication
    with the forkserver process instead of the Linux abstract
    socket namespace. Only code that chooses to use the
    “forkserver” start method is affected. Abstract sockets have
    no permissions and could allow any user on the system in the
    same network namespace (often the whole system) to inject
    code into the multiprocessing forkserver process. This was
    a potential privilege escalation. Filesystem based socket
    permissions restrict this to the forkserver process user as
    was the default in Python 3.8 and earlier. This prevents
    Linux CVE-2022-42919.
  - Fix an issue where several frame objects could be backed by
    the same interpreter frame, possibly leading to corrupted
    memory and hard crashes of the interpreter.
  - Fix possible data corruption or crashes when accessing the
    f_back member of newly-created generator or coroutine frames.
  - Fix a crash occurring when PyEval_GetFrame() is called while
    the topmost Python frame is in a partially-initialized state.
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit. Patch by Victor
    Stinner.
  - Fix undefined behaviour in _testcapimodule.c.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message. Patch by Victor Stinner.
  - Correctly raise SyntaxError on exception groups (PEP 654) on
    python versions prior to 3.11
  - Document some places where an assignment expression needs
    parentheses.
  - Update the bundled copies of pip and setuptools to versions
    22.3 and 65.5.0 respectively.
  - fix Flag to use boundary CONFORM
  - This restores previous Flag behavior of allowing flags with
    non-sequential values to be combined; e.g.
  - class Skip(Flag): TWO = 2 EIGHT = 8
  - Skip.TWO | Skip.EIGHT -&gt; &lt;Skip.TWO|EIGHT: 10&gt;
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.11.1:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed
    to the stderr server lo This is done by changing the
    http.server BaseHTTPRequestHandler .log_message method to
    replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2022-45061).
  - Update bundled libexpat to 2.5.0
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. Issue reported
    and initial fix by Caleb Shortt. Patch by Victor Stinner.
  - Fix a crash when an object which does not have a dictionary
    frees its instance values.
  - Fix a bug in the tokenizer that could cause infinite
    recursion when showing syntax warnings that happen in the
    first line of the source. Patch by Pablo Galindo
  - Fix an issue that could cause frames to be visible to Python
    code as they are being torn down, possibly leading to memory
    corruption or hard crashes of the interpreter.
  - Fix a reference bug in _imp.create_builtin() after the
    creation of the first sub-interpreter for modules builtins
    and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if the
    tokenizer copies a line missing the newline caracter from a
    file that is as long as the available tokenizer buffer. Patch
    by Pablo galindo
  - Fix bug where an ExceptionGroup subclass can wrap a
    BaseException.
  - Fix zip path for venv created from a non-installed python on
    POSIX platforms.
  - Fix an issue that could potentially cause incorrect error
    handling for some bytecode instructions.
  - Fix an issue that prevented PyThreadState and
    PyInterpreterState memory from being freed properly.
  - Fix failure in except* with unhashable exceptions.
  - Fix calculation of sys._base_executable when inside a POSIX
    virtual environment using copies of the python binary when
    the base installation does not provide the executable name
    used by the venv. Calculation will fall back to alternative
    names (“python&lt;MAJOR&gt;”, “python&lt;MAJOR&gt;.&lt;MINOR&gt;”).
  - Update faulthandler to emit an error message with the proper
    unexpected signal number. Patch by Dong-hee Na.
  - Fix location of SyntaxError for a try block with both except
    and except*.
  - Fix the error reporting positions of specialized traceback
    anchors when the source line contains Unicode characters.
  - Fix subscription of type aliases containing bare generic
    types or types like TypeVar: for example tuple[A, T][int] and
    tuple[TypeVar, T][int], where A is a generic type, and T is a
    type variable.
  - Lower the recursion depth for marshal on WASI to support
    wasmtime 2.0/main.
  - Fix multiple crashes in debug mode when str subclasses are
    used instead of str itself.
  - Fix an issue where member descriptors (such as those for
    __slots__) could behave incorrectly or crash instead of
    raising a TypeError when accessed via an instance of an
    invalid type.
  - Suppress ImportError for invalid query for help()
    command. Patch by Dong-hee Na.
  - Fix detection of MAC addresses for uuid on certain OSs. Patch
    by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - os.sched_yield() now release the GIL while calling
    sched_yield(2). Patch by Dong-hee Na.
  - Fix an issue that could delay the specialization of PRECALL
    instructions.
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Ensure that all Python frame objects are backed by “complete”
    frames.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__(). Patch by Ofey Chan.
  - Fix the Python path configuration used to initialized
    sys.path at Python startup. Paths are no longer encoded
    to UTF-8/strict to avoid encoding errors if it contains
    surrogate characters (bytes paths are decoded with the
    surrogateescape error handler). Patch by Victor Stinner.
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting. Issue
    discovered and analyzed by Mingliang ZHAO. Patch by Victor
    Stinner.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Make sure that all frame objects created are created from
    valid interpreter frames. Prevents the possibility of invalid
    frames in backtraces and signal handlers.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - On WASI ENOTCAPABLE is now mapped to PermissionError. The
    errno modules exposes the new error number. getpath.py now
    ignores PermissionError when it cannot open landmark files
    pybuilddir.txt and pyenv.cfg.
  - Allow pdb to locate source for frozen modules in the standard
    library.
  - Raise ValueError instead of SystemError when methods of
    uninitialized io.IncrementalNewlineDecoder objects are
    called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when the opener
    returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a deprecation warning
    when a new event loop was created implicitly. It no longer
    emits a deprecation warning if the current event loop was
    set.
  - Fix bug when calling trace.CoverageResults with valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid blocking
    threads.
  - Fix ast.increment_lineno() to also cover ast.TypeIgnore when
    changing line numbers.
  - Fix bug in urllib.parse.urlparse() that causes URL schemes
    that begin with a digit, a plus sign, or a minus sign to be
    parsed incorrectly.
  - Check the number of arguments in substitution in user
    generics containing a TypeVarTuple and one or more TypeVar.
  - Fix substitution of ParamSpec followed by TypeVarTuple in
    generic aliases.
  - Fix substitution of TypeVarTuple and ParamSpec together in
    user generics.
  - Fixed bug where inspect.signature() reported incorrect
    arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not set during
    __initsubclass__.
  - Remove older version of
    _SSLProtocolTransport.get_write_buffer_limits in
    asyncio.sslproto
  - fix negative numbers failing in verify()
  - Fix statistics.NormalDist pickle with 0 and 1 protocols.
  - enum.auto() is now correctly activated when combined with
    other assignment values. E.g. ONE = auto(), 'some text' will
    now evaluate as (1, 'some text').
  - Update the bundled copy of pip to version 22.3.1.
  - Clean up refleak on failed module initialisation in _zoneinfo
  - Clean up refleaks on failed module initialisation in in
    _pickle
  - Clean up refleak on failed module initialisation in _io.
  - Fix memory leak in math.dist() when both points don’t have
    the same dimension. Patch by Kumar Aditya.
  - [3.11] Applied changes from importlib_metadata 4.11.4
    through 4.13, including compatibility and robustness
    fixes for Distribution objects without _normalized_name,
    disallowing invalid inputs to Distribution.from_name, and
    refined behaviors in PathDistribution._name_from_stem and
    PathDistribution._normalized_name.
  - Fix argument typechecks in _overlapped.WSAConnect() and
    _overlapped.Overlapped.WSASendTo() functions.
  - Prevent crashing in traceback when retrieving the byte-offset
    for some source files that contain certain unicode
    characters.
  - Fix internal error in the re module which in very rare
    circumstances prevented compilation of a regular expression
    containing a conditional expression without the “else”
    branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to protect
    concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in asyncio
    with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a self-referencing chained
    exception is raised
  - tkinter.Text.count() raises now an exception for options
    starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields and
    _asdict would include all six properties including processor.
  - A createSocket() method was added to SysLogHandler.
  - Fix bug in urllib.parse.urlparse() that causes certain port
    numbers containing whitespace, underscores, plus and minus
    signs, or non-ASCII digits to be incorrectly accepted.
  - Allow venv to pass along PYTHON* variables to ensurepip and
    pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in multi-threaded
    applications. On macOS, the libc syslog() function is not
    thread-safe, so syslog.syslog() no longer releases the GIL to
    call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Make sure patch.dict() can be applied on async functions.
  - Earlier in 3.11 we deprecated
    asyncio.Task.cancel("message"). We realized we were too
    harsh, and have undeprecated it.
  - Change deprecate warning message in unittest from It is
    deprecated to return a value!=None to It is deprecated to
    return a value that is not None from a test case
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Fix is_private properties in the ipaddress module. Previously
    non-private networks (0.0.0.0/0) would return True from this
    method; now they correctly return False.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output. Patch by Kumar Aditya.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix repr of Any subclasses.
  - Work around missing socket functions in socket’s __repr__.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix handling of bytes path-like objects in os.ismount().
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - To avoid apparent memory leaks when asyncio.open_connection()
    raises, break reference cycles generated by local exception
    and future instances (which has exception instance as its
    member var). Patch by Dong Uk, Kang.
  - Fixed flickering of the turtle window when the tracer is
    turned off. Patch by Shin-myoung-serp.
  - Fix asyncio subprocess transport to kill process cleanly
    when process is blocked and avoid RuntimeError when loop is
    closed. Patch by Kumar Aditya.
  - Prevent error when activating venv in nested fish instances.
  - TarFile.next() now returns None when called on an empty
    tarfile.
  - Document the optional callback parameter of WeakMethod. Patch
    by Géry Ogam.
  - Restrict use of sockets instead of pipes for stdin of
    subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the ignore_dangling_symlinks
    argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a store_true
    action is given an explicit argument.
  - Document that calling variadic functions with ctypes requires
    special care on macOS/arm64 (and possibly other platforms).
  - Remove extra row
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Restructured the documentation for the os.wait* family of
    functions, and improved the docs for os.waitid() with more
    explanation of the possible argument constants.
  - Skip test_normalization() of test_unicodedata if it
    fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Correct test_marsh on (32 bit) x86: test_deterministic sets
    was failing.
  - Optional big memory tests in test_sqlite3 now catch the
    correct sqlite.DataError exception type in case of too large
    strings and/or blobs passed.
  - Fix a bug in the typing tests where a test relying
    on CPython-specific implementation details was not
    decorated with @cpython_only and was not skipped on other
    implementations.
  - Add tests for star-unpacking with PEP 646, and some other
    miscellaneous PEP 646 tests.
  - Added explicit coverage of Py_Initialize (and hence
    Py_InitializeEx) back to the embedding tests (all other
    embedding tests migrated to Py_InitializeFromConfig in Python
    3.11)
  - Some C API tests were moved into the new Lib/test/test_capi/
    directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix a compilation issue with GCC 12 on macOS.
  - Fix -Wimplicit-int compiler warning in configure check for
    PTHREAD_SCOPE_SYSTEM.
  - Fix a possible fd leak in Programs/_freeze_module.c
    introduced in Python 3.11.
  - Fix build with PYTHON_FOR_REGEN=python3.8.
  - Specify the full path to the source location for make
    docclean (needed for cross-builds).
  - Don’t use vendored libmpdec headers if --with-system-libmpdec
    is passed to configure. Don’t use vendored libexpat headers
    if --with-system-expat is passed to !configure.
  - Fix the build process of clang compiler for _bootstrap_python
    if LTO optimization is applied. Patch by Matthias Görgens and
    Dong-hee Na.
  - wasm32-emscripten builds for browsers now include
    concurrent.futures for asyncio and unittest.mock.
  - wasm32-emscripten platform no longer builds resource module,
    getresuid(), getresgid(), and their setters. The APIs are
    stubs and not functional.
  - Updated pegen regeneration script on Windows to find and
    use Python 3.9 or higher. Prior to this, pegen regeneration
    already required 3.9 or higher, but the script may have used
    lower versions of Python.
  - Fix a bug in the previous bugfix that caused IDLE to
    not start when run with 3.10.8, 3.12.0a1, and at least
    Microsoft Python 3.10.2288.0 installed without the Lib/test
    package. 3.11.0 was never affected.
  - The wasm_build.py script now pre-builds Emscripten ports,
    checks for broken EMSDK versions, and warns about pkg-config
    env vars.
  - The new tool Tools/wasm/wasm_builder.py automates configure,
    compile, and test steps for building CPython on WebAssembly
    platforms.
  - Fix handling of module docstrings in Tools/i18n/pygettext.py.
  - PyBUF_* constants were marked as part of Limited API
    of Python 3.11+. These were available in 3.11.0 with
    Py_LIMITED_API defined for 3.11, and are necessary to use the
    buffer API.
  - Fix use-after-free in Py_SetPythonHome(NULL),
    Py_SetProgramName(NULL) and _Py_SetProgramFullPath(NULL)
    function calls. Issue reported by Benedikt Reinartz. Patch by
    Victor Stinner.
  - Py_InitializeEx now correctly calls PyConfig_Clear after
    initializing the interpreter (the omission didn’t cause a
    memory leak only because none of the dynamically allocated
    config fields are populated by the wrapper function)
- Removed upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mcepl@suse.com" date="1673352000">- Don't fail on Sphinx build warnings.
- For jsc#PED-1570, jsc#PED-2217 and jsc#PED-68,
  providing Python 3.11 for SLE-15-SP4.</changelog>
  <changelog author="dmueller@suse.com" date="1674561600">- build GLIBC hwcaps optimized versions of the interpreter</changelog>
  <changelog author="kukuk@suse.com" date="1674734400">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add python310 Obsoletes line to obsolete_python_versioned macro.</changelog>
  <changelog author="mcepl@suse.com" date="1677844800">- Update to 3.11.2:
  Bug fixes, no changes in API and no security bugs.</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.11.3:
  - Security
  - gh-101727: Updated the OpenSSL version used in Windows
    and macOS binary release builds to 1.1.1t to address
    CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the
    OpenSSL 2023-02-07 security advisory.
  - Core and Builtins
  - gh-101975: Fixed stacktop value on tracing entries to avoid
    corruption on garbage collection.
  - gh-102701: Fix overflow when creating very large dict.
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102281: Fix potential nullptr dereference and use of
    uninitialized memory in fileutils. Patch by Max Bachmann.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - gh-101696: Invalidate type version tag in
    _PyStaticType_Dealloc for static types, avoiding bug where
    a false cache hit could crash the interpreter. Patch by
    Kumar Aditya.
  - Library
  - gh-102549: Don’t ignore exceptions in member type creation.
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-102780: The asyncio.Timeout context manager now
    works reliably even when performing cleanup due to task
    cancellation. Previously it could raise a CancelledError
    instead of an TimeoutError in such cases.
  - gh-88965: typing: Fix a bug relating to substitution in   .
    Pacustom classes generic over a ParamSpec. Previously, if   .
    Pathe ParamSpec was substituted with a parameters list that .
    Paitself contained a TypeVar, the TypeVar in the parameters .
    Palist could not be subsequently substituted. This is now   .
    Pafixed tch by Nikita Sobolev                               .
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-102069: Fix __weakref__ descriptor generation for custom
    dataclasses.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-96127: inspect.signature was raising TypeError on
    call with mock objects. Now it correctly returns (*args,
  * *kwargs) as infered signature.
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-89792: test_tools now copies up to 10x less source data
    to a temporary directory during the freeze test by ignoring
    git metadata and other artifacts. It also limits its python
    build parallelism based on os.cpu_count instead of hard
    coding it as 8 cores.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Add 103213-fetch-CONFIG_ARGS.patch (gh#python/cpython#103053).
- Add skip_if_buildbot-extend.patch to avoid the bug altogether
  (extending what skip_if_buildbot covers).
- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  bsc#1203750 (CVE-2007-4559) and implementing "PEP 706 – Filter
  for tarfile.extractall".</changelog>
  <changelog author="mcepl@suse.com" date="1687780800">- Remove obsolete_python_versioned macro again. This mechanism
  has no business to be in Python 3.11, because we have abolished
  with it whole interpreter+setuptools+pip product. Python 3.11
  should not be replaced by later versions anymore.</changelog>
</package>
<package pkgid="bb13833bc4ce9258a986cd85f09f48b20f111b03b2eb3c1433ee4a76ba8dab2e" name="libpython3_11-1_0" arch="ppc64le">
  <version epoch="0" ver="3.11.3" rel="150400.9.12.1"/>
  <changelog author="mcepl@suse.com" date="1657800000">- Update to 3.11.0b4:
- Fixes many bugs and adds following more significant changes
- Security
  - gh-68966: The deprecated mailcap module now refuses to inject
    Coreunsafe text (filenames, MIME types, parameters) into
    shell Corecommands. Instead of using such text, it will
    warn and act Coreas if a match was not found (or for test
    commands, as if the Coretest failed). and Builtins
  - gh-93516: Lazily create a table mapping bytecode offsets to
    line numbers to speed up calculation of line numbers when
    tracing.
  - gh-93461: importlib.invalidate_caches() now drops entries
    from sys.path_importer_cache with a relative path as
    name. This solves a caching issue when a process changes its
    current working directory.
  - FileFinder no longer inserts a dot in the path, e.g.
    /egg/./spam is now /egg/spam.
  Library
  - gh-93896: Fix asyncio.run() and
    unittest.IsolatedAsyncioTestCase to always the set event loop
    as it was done in Python 3.10 and earlier. Patch by Kumar
    Aditya.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  Tools/Demos
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  C API
  - gh-93937: The following frame functions and type are now
    directly available with #include &lt;Python.h&gt;, it’s no longer
    needed to add #include &lt;frameobject.h&gt;:
    PyFrame_Check()
    PyFrame_GetBack()
    PyFrame_GetBuiltins()
    PyFrame_GetGenerator()
    PyFrame_GetGlobals()
    PyFrame_GetLasti()
    PyFrame_GetLocals()
    PyFrame_Type</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="mcepl@suse.com" date="1658836800">- Update to 3.11.0b5:
  - Core and Builtins
  - gh-93351: ast.AST node positions are now validated when
    provided to compile() and other related functions. If
    invalid positions are detected, a ValueError will be
    raised.
  - gh-94438: Fix an issue that caused extended opcode
    arguments and some conditional pops to be ignored when
    calculating valid jump targets for assignments to the
    f_lineno attribute of frame objects. In some cases, this
    could cause inconsistent internal state, resulting in a
    hard crash of the interpreter.
  - gh-95060: Undocumented PyCode_Addr2Location function now
    properly returns when addrq argument is less than zero.
  - gh-95113: Replace all EXTENDED_ARG_QUICK instructions
    with basic EXTENDED_ARG instructions in unquickened
    code. Consumers of non-adaptive bytecode should be able to
    handle extended arguments the same way they were handled in
    CPython 3.10 and older.
  - gh-91409: Fix incorrect source location info caused by
    certain optimizations in the bytecode compiler.
  - gh-94036: Fix incorrect source location info for some
    multi-line attribute accesses and method calls.
  - gh-94739: Allow jumping within, out of, and across
    exception handlers in the debugger.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than (3,
    9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than (3,
    8). Patch by Shantanu Jain.
  - gh-91256: Ensures the program name is known for help text
    during interpreter startup.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-94822: Fix an issue where lookups of metaclass
    descriptors may be ignored when an identically-named
    attribute also exists on the class itself.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-90699: Fix reference counting bug in
    bool.__repr__(). Patch by Kumar Aditya.
  - Library
  - gh-95087: Fix IndexError in parsing invalid date in the
    email module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-95132: Fix a sqlite3 regression where *args and **kwds
    were incorrectly relayed from connect() to the Connection
    factory. The regression was introduced in 3.11a1 with PR
    24421 (gh-85128). Patch by Erlend E. Aasland.`
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-95105: wsgiref.types.InputStream.__iter__() should
    return Iterator[bytes], not Iterable[bytes]. Patch by
    Shantanu Jain.
  - gh-94857: Fix refleak in
    _io.TextIOWrapper.reconfigure. Patch by Kumar Aditya.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - bpo-47025: Drop support for bytes on sys.path.
  - Tests
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - Build
  - gh-94847: Fixed _decimal module build issue on GCC when
    compiling with LTO and pydebug. Debug builds no longer
    force inlining of functions.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-94801: configure now uses custom flags like ZLIB_CFLAGS
    and ZLIB_LIBS when searching for headers and libraries.
  - gh-94773: deepfreeze.py now supports code object with
    frozensets that contain incompatible, unsortable types.
  - C API
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
  - gh-94731: Python again uses C-style casts for
    most casting operations when compiled with
    C++. This may trigger compiler warnings, if they
    are enabled with e.g. -Wold-style-cast `` or
    ``-Wzero-as-null-pointer-constant options for g++.</changelog>
  <changelog author="mcepl@suse.com" date="1660996800">- Update to 3.11.0rc1:
  - Core and Builtins
  - Update code object hashing and equality to consider all
    debugging and exception handling tables. This fixes an
    issue where certain non-identical code objects could be
    “deduplicated” during compilation.
  - _PyPegen_Parser_New now properly detects token memory
    allocation errors. Patch by Honglin Zhu.
  - Run Python code in tracer/profiler function at full
    speed. Fixes slowdown in earlier versions of 3.11.
  - Emit a warning in debug mode if an object does not call
    PyObject_GC_UnTrack() before deallocation. Patch by Pablo
    Galindo.
  - Prevented crashes in the AST constructor when
    compiling some absurdly long expressions like
    "+0"*1000000. RecursionError is now raised instead. Patch
    by Pablo Galindo
  - ast.AST node positions are now validated when provided to
    compile() and other related functions. If invalid positions
    are detected, a ValueError will be raised.
  - Fix error detection in some builtin functions when keyword
    argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - Library
  - Update bundled pip to 22.2.2.
  - Fix asyncio.TaskGroup to propagate exception when
    asyncio.CancelledError was replaced with another exception
    by a context manger. Patch by Kumar Aditya and Guido van
    Rossum.
  - Update bundled pip to 22.2.1.
  - Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - Fix asyncio.run() for asyncio.Task implementations without
    uncancel() method. Patch by Kumar Aditya.
  - Fix check for existence of os.EFD_CLOEXEC, os.EFD_NONBLOCK
    and os.EFD_SEMAPHORE flags on older kernel versions where
    these flags are not present. Patch by Kumar Aditya.
  - Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - Ensure that timeouts scheduled with asyncio.Timeout that
    have already expired are delivered promptly.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix findtext in the xml module to only give an empty string
    when the text attribute is set to None.
  - Documentation
  - Fix stylesheet not working in Windows CHM htmlhelp docs
    and add warning that they are deprecated. Contributed by
    C.A.M. Gerlach.
  - Update library documentation with availability information
    on WebAssembly platforms wasm32-emscripten and wasm32-wasi.
  - Use consistent syntax for platform availability. The
    directive now supports a content body and emits a warning
    when it encounters an unknown platform.
  - Document a limitation in ThreadPoolExecutor where its exit
    handler is executed before any handlers in atexit.
  - Tests
  - Lib/test/test_asyncio/test_ssl.py exposed a bug in the
    macOS kernel where intense concurrent load on non-blocking
    sockets occasionally causes errno.ENOBUFS (“No buffer space
    available”) to be emitted. FB11063974 filed with Apple, in
    the mean time as a workaround buffer size used in tests on
    macOS is decreased to avoid intermittent failures. Patch by
    Fantix King.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - Add a regression test for re exponentional slowdown when
    using rjsmin.
  - Build
  - Fix a regression in configure script that caused some
    header checks to ignore custom CPPFLAGS. The regression was
    introduced in gh-94802.
  - wasm32-wasi builds no longer depend on WASIX’s pthread
    stubs. Python now has its own stubbed pthread API.
  - Python now detects missing dup function in WASI and works
    around some missing errno, select, and socket constants.
  - Python now skips missing socket functions and methods on
    WASI. WASI can only create sockets from existing fd /
    accept and has no netdb.
  - Platforms wasm32-unknown-emscripten and wasm32-unknown-wasi
    have been promoted to PEP 11 tier 3 platform support.
  - IDLE
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).
  - Fix the Shell context menu copy-with-prompts bug of copying
    an extra line when one selects whole lines.
  - In the Edit menu, move Select All and add a new separator.
  - Enable using IDLE’s module browser with .pyw files.
  - Add .pyi as a recognized extension for IDLE on macOS. This
    allows opening stub files by double clicking on them in the
    Finder.
  - C API
  - Restore the 3.10 behavior for multiple inheritance of C
    extension classes that store their dictionary at the end of
    the struct.
  - Added PyCode_GetVarnames(), PyCode_GetCellvars() and
    PyCode_GetFreevars() for accessing co_varnames, co_cellvars
    and co_freevars respectively via the C API.</changelog>
  <changelog author="mcepl@suse.com" date="1660996801">- fix import_failed.map to refer to the python 3.11 package versions</changelog>
  <changelog author="schwab@suse.de" date="1662379200">- Increase testsuite timeout for test_freeze_simple_script</changelog>
  <changelog author="mcepl@suse.com" date="1663243200">- Update to 3.11.0rc2:
  - Converting between int and str in bases other than 2
    (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base
    10 (decimal) now raises a ValueError if the number of digits
    in string form is above a limit to avoid potential denial of
    service attacks due to the algorithmic complexity. This is
    a mitigation for CVE-2020-10735.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Fix case of undefined behavior in ceval.c
  - Do not expose KeyWrapper in _functools.
  - Ensure that tracing, sys.setrace(), is turned on
    immediately. In pre-release versions of 3.11, some tracing
    events might have been lost when turning on tracing in a
    __del__ method or interrupt.
  - Fix use after free in trace refs build mode. Patch by Kumar
    Aditya.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Make sure that incomplete frames do not show up in
    tracemalloc traces.
  - Remove two cases of undefined behavior, by adding NULL
    checks.
  - Fix possible NULL pointer dereference in
    _PyThread_CurrentFrames. Patch by Kumar Aditya.
  - Fix AttributeError missing name and obj attributes in
    object.__getattribute__(). Patch by Philip Georgi.
  - Loading a file with invalid UTF-8 will now report the broken
    character at the correct location.
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes. Patch by Pablo Galindo
  - Fix a deadlock in PyGILState_Ensure() when allocating new
    thread state. Patch by Kumar Aditya.
  - PyType_Ready() now initializes ht_cached_keys and performs
    additional checks to ensure that type objects are properly
    configured. This avoids crashes in 3rd party packages that
    don’t use regular API to create new types.
  - Skip over incomplete frames in PyThreadState_GetFrame().
  - Fix format string in _PyPegen_raise_error_known_location that
    can lead to memory corruption on some 64bit systems. The
    function was building a tuple with i (int) instead of n
    (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - Fix incorrect error message in the io module.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL. Patch by Victor Stinner.
  - Correct conversion of numbers.Rational’s to float.
  - Fix TypeVarTuple.__typing_prepare_subst__. TypeError was not
    raised when using more than one TypeVarTuple, like [*T, *V]
    in type alias substitutions.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Fix incorrect condition that causes sys.thread_info.name to
    be wrong on pthread platforms.
  - Remove an incompatible change from bpo-28080 that caused a
    regression that ignored the utf8 in ZipInfo.flag_bits. Patch
    by Pablo Galindo.
  - Fix asyncio.Runner to call asyncio.set_event_loop() only
    once to avoid calling attach_loop() multiple times on child
    watchers. Patch by Kumar Aditya.
  - Fix unittest.IsolatedAsyncioTestCase to set event loop before
    calling setup functions. Patch by Kumar Aditya.
  - When a task catches asyncio.CancelledError and raises some
    other error, the other error should generally not silently be
    suppressed.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on a
    Linux kernel with FIPS enabled.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks. Patch by Kumar Aditya.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from the
    lower level threading and multiprocessing modules.
  - What’s New 3.11 now has instructions for how to provide
    compiler and linker flags for Tcl/Tk and OpenSSL on RHEL 7
    and CentOS 7.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing. Patch by Ross Burton.
  - Build and test with OpenSSL 1.1.1q
- Use support-expat-CVE-2022-25236-patched.patch from the current
  version of gh#python/cpython#93900 instead of the old
  support-expat-245.patch.
- Reapply fix_configure_rst.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1666699200">- Update to 3.11.0 (overall changes from 3.10.*):
  - General changes
  - PEP 657 -- Include Fine-Grained Error Locations in
    Tracebacks
  - PEP 654 -- Exception Groups and except*
  - PEP 680 -- tomllib: Support for Parsing TOML in the
    Standard Library
  - gh-90908 -- Introduce task groups to asyncio
  - gh-34627 -- Atomic grouping ((?&gt;...)) and possessive
    quantifiers (*+, ++, ?+, {m,n}+) are now supported in
    regular expressions.
  - The Faster CPython Project is already yielding some
    exciting results. Python 3.11 is up to 10-60% faster than
    Python 3.10. On average, we measured a 1.22x speedup on the
    standard benchmark suite. See Faster CPython for details.
  - Typing and typing language changes
  - PEP 673 -- Self Type
  - PEP 646 -- Variadic Generics
  - PEP 675 -- Arbitrary Literal String Type
  - PEP 655 -- Marking individual TypedDict items as required
    or potentially-missing
  - PEP 681 -- Data Class Transforms
- (just changes from 3.11.0rc2):
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size. Issue reported by Jordan Limor. Patch by
    Victor Stinner.
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication
    with the forkserver process instead of the Linux abstract
    socket namespace. Only code that chooses to use the
    “forkserver” start method is affected. Abstract sockets have
    no permissions and could allow any user on the system in the
    same network namespace (often the whole system) to inject
    code into the multiprocessing forkserver process. This was
    a potential privilege escalation. Filesystem based socket
    permissions restrict this to the forkserver process user as
    was the default in Python 3.8 and earlier. This prevents
    Linux CVE-2022-42919.
  - Fix an issue where several frame objects could be backed by
    the same interpreter frame, possibly leading to corrupted
    memory and hard crashes of the interpreter.
  - Fix possible data corruption or crashes when accessing the
    f_back member of newly-created generator or coroutine frames.
  - Fix a crash occurring when PyEval_GetFrame() is called while
    the topmost Python frame is in a partially-initialized state.
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit. Patch by Victor
    Stinner.
  - Fix undefined behaviour in _testcapimodule.c.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message. Patch by Victor Stinner.
  - Correctly raise SyntaxError on exception groups (PEP 654) on
    python versions prior to 3.11
  - Document some places where an assignment expression needs
    parentheses.
  - Update the bundled copies of pip and setuptools to versions
    22.3 and 65.5.0 respectively.
  - fix Flag to use boundary CONFORM
  - This restores previous Flag behavior of allowing flags with
    non-sequential values to be combined; e.g.
  - class Skip(Flag): TWO = 2 EIGHT = 8
  - Skip.TWO | Skip.EIGHT -&gt; &lt;Skip.TWO|EIGHT: 10&gt;
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.11.1:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed
    to the stderr server lo This is done by changing the
    http.server BaseHTTPRequestHandler .log_message method to
    replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2022-45061).
  - Update bundled libexpat to 2.5.0
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. Issue reported
    and initial fix by Caleb Shortt. Patch by Victor Stinner.
  - Fix a crash when an object which does not have a dictionary
    frees its instance values.
  - Fix a bug in the tokenizer that could cause infinite
    recursion when showing syntax warnings that happen in the
    first line of the source. Patch by Pablo Galindo
  - Fix an issue that could cause frames to be visible to Python
    code as they are being torn down, possibly leading to memory
    corruption or hard crashes of the interpreter.
  - Fix a reference bug in _imp.create_builtin() after the
    creation of the first sub-interpreter for modules builtins
    and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if the
    tokenizer copies a line missing the newline caracter from a
    file that is as long as the available tokenizer buffer. Patch
    by Pablo galindo
  - Fix bug where an ExceptionGroup subclass can wrap a
    BaseException.
  - Fix zip path for venv created from a non-installed python on
    POSIX platforms.
  - Fix an issue that could potentially cause incorrect error
    handling for some bytecode instructions.
  - Fix an issue that prevented PyThreadState and
    PyInterpreterState memory from being freed properly.
  - Fix failure in except* with unhashable exceptions.
  - Fix calculation of sys._base_executable when inside a POSIX
    virtual environment using copies of the python binary when
    the base installation does not provide the executable name
    used by the venv. Calculation will fall back to alternative
    names (“python&lt;MAJOR&gt;”, “python&lt;MAJOR&gt;.&lt;MINOR&gt;”).
  - Update faulthandler to emit an error message with the proper
    unexpected signal number. Patch by Dong-hee Na.
  - Fix location of SyntaxError for a try block with both except
    and except*.
  - Fix the error reporting positions of specialized traceback
    anchors when the source line contains Unicode characters.
  - Fix subscription of type aliases containing bare generic
    types or types like TypeVar: for example tuple[A, T][int] and
    tuple[TypeVar, T][int], where A is a generic type, and T is a
    type variable.
  - Lower the recursion depth for marshal on WASI to support
    wasmtime 2.0/main.
  - Fix multiple crashes in debug mode when str subclasses are
    used instead of str itself.
  - Fix an issue where member descriptors (such as those for
    __slots__) could behave incorrectly or crash instead of
    raising a TypeError when accessed via an instance of an
    invalid type.
  - Suppress ImportError for invalid query for help()
    command. Patch by Dong-hee Na.
  - Fix detection of MAC addresses for uuid on certain OSs. Patch
    by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - os.sched_yield() now release the GIL while calling
    sched_yield(2). Patch by Dong-hee Na.
  - Fix an issue that could delay the specialization of PRECALL
    instructions.
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Ensure that all Python frame objects are backed by “complete”
    frames.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__(). Patch by Ofey Chan.
  - Fix the Python path configuration used to initialized
    sys.path at Python startup. Paths are no longer encoded
    to UTF-8/strict to avoid encoding errors if it contains
    surrogate characters (bytes paths are decoded with the
    surrogateescape error handler). Patch by Victor Stinner.
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting. Issue
    discovered and analyzed by Mingliang ZHAO. Patch by Victor
    Stinner.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Make sure that all frame objects created are created from
    valid interpreter frames. Prevents the possibility of invalid
    frames in backtraces and signal handlers.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - On WASI ENOTCAPABLE is now mapped to PermissionError. The
    errno modules exposes the new error number. getpath.py now
    ignores PermissionError when it cannot open landmark files
    pybuilddir.txt and pyenv.cfg.
  - Allow pdb to locate source for frozen modules in the standard
    library.
  - Raise ValueError instead of SystemError when methods of
    uninitialized io.IncrementalNewlineDecoder objects are
    called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when the opener
    returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a deprecation warning
    when a new event loop was created implicitly. It no longer
    emits a deprecation warning if the current event loop was
    set.
  - Fix bug when calling trace.CoverageResults with valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid blocking
    threads.
  - Fix ast.increment_lineno() to also cover ast.TypeIgnore when
    changing line numbers.
  - Fix bug in urllib.parse.urlparse() that causes URL schemes
    that begin with a digit, a plus sign, or a minus sign to be
    parsed incorrectly.
  - Check the number of arguments in substitution in user
    generics containing a TypeVarTuple and one or more TypeVar.
  - Fix substitution of ParamSpec followed by TypeVarTuple in
    generic aliases.
  - Fix substitution of TypeVarTuple and ParamSpec together in
    user generics.
  - Fixed bug where inspect.signature() reported incorrect
    arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not set during
    __initsubclass__.
  - Remove older version of
    _SSLProtocolTransport.get_write_buffer_limits in
    asyncio.sslproto
  - fix negative numbers failing in verify()
  - Fix statistics.NormalDist pickle with 0 and 1 protocols.
  - enum.auto() is now correctly activated when combined with
    other assignment values. E.g. ONE = auto(), 'some text' will
    now evaluate as (1, 'some text').
  - Update the bundled copy of pip to version 22.3.1.
  - Clean up refleak on failed module initialisation in _zoneinfo
  - Clean up refleaks on failed module initialisation in in
    _pickle
  - Clean up refleak on failed module initialisation in _io.
  - Fix memory leak in math.dist() when both points don’t have
    the same dimension. Patch by Kumar Aditya.
  - [3.11] Applied changes from importlib_metadata 4.11.4
    through 4.13, including compatibility and robustness
    fixes for Distribution objects without _normalized_name,
    disallowing invalid inputs to Distribution.from_name, and
    refined behaviors in PathDistribution._name_from_stem and
    PathDistribution._normalized_name.
  - Fix argument typechecks in _overlapped.WSAConnect() and
    _overlapped.Overlapped.WSASendTo() functions.
  - Prevent crashing in traceback when retrieving the byte-offset
    for some source files that contain certain unicode
    characters.
  - Fix internal error in the re module which in very rare
    circumstances prevented compilation of a regular expression
    containing a conditional expression without the “else”
    branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to protect
    concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in asyncio
    with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a self-referencing chained
    exception is raised
  - tkinter.Text.count() raises now an exception for options
    starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields and
    _asdict would include all six properties including processor.
  - A createSocket() method was added to SysLogHandler.
  - Fix bug in urllib.parse.urlparse() that causes certain port
    numbers containing whitespace, underscores, plus and minus
    signs, or non-ASCII digits to be incorrectly accepted.
  - Allow venv to pass along PYTHON* variables to ensurepip and
    pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in multi-threaded
    applications. On macOS, the libc syslog() function is not
    thread-safe, so syslog.syslog() no longer releases the GIL to
    call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Make sure patch.dict() can be applied on async functions.
  - Earlier in 3.11 we deprecated
    asyncio.Task.cancel("message"). We realized we were too
    harsh, and have undeprecated it.
  - Change deprecate warning message in unittest from It is
    deprecated to return a value!=None to It is deprecated to
    return a value that is not None from a test case
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Fix is_private properties in the ipaddress module. Previously
    non-private networks (0.0.0.0/0) would return True from this
    method; now they correctly return False.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output. Patch by Kumar Aditya.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix repr of Any subclasses.
  - Work around missing socket functions in socket’s __repr__.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix handling of bytes path-like objects in os.ismount().
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - To avoid apparent memory leaks when asyncio.open_connection()
    raises, break reference cycles generated by local exception
    and future instances (which has exception instance as its
    member var). Patch by Dong Uk, Kang.
  - Fixed flickering of the turtle window when the tracer is
    turned off. Patch by Shin-myoung-serp.
  - Fix asyncio subprocess transport to kill process cleanly
    when process is blocked and avoid RuntimeError when loop is
    closed. Patch by Kumar Aditya.
  - Prevent error when activating venv in nested fish instances.
  - TarFile.next() now returns None when called on an empty
    tarfile.
  - Document the optional callback parameter of WeakMethod. Patch
    by Géry Ogam.
  - Restrict use of sockets instead of pipes for stdin of
    subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the ignore_dangling_symlinks
    argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a store_true
    action is given an explicit argument.
  - Document that calling variadic functions with ctypes requires
    special care on macOS/arm64 (and possibly other platforms).
  - Remove extra row
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Restructured the documentation for the os.wait* family of
    functions, and improved the docs for os.waitid() with more
    explanation of the possible argument constants.
  - Skip test_normalization() of test_unicodedata if it
    fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Correct test_marsh on (32 bit) x86: test_deterministic sets
    was failing.
  - Optional big memory tests in test_sqlite3 now catch the
    correct sqlite.DataError exception type in case of too large
    strings and/or blobs passed.
  - Fix a bug in the typing tests where a test relying
    on CPython-specific implementation details was not
    decorated with @cpython_only and was not skipped on other
    implementations.
  - Add tests for star-unpacking with PEP 646, and some other
    miscellaneous PEP 646 tests.
  - Added explicit coverage of Py_Initialize (and hence
    Py_InitializeEx) back to the embedding tests (all other
    embedding tests migrated to Py_InitializeFromConfig in Python
    3.11)
  - Some C API tests were moved into the new Lib/test/test_capi/
    directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix a compilation issue with GCC 12 on macOS.
  - Fix -Wimplicit-int compiler warning in configure check for
    PTHREAD_SCOPE_SYSTEM.
  - Fix a possible fd leak in Programs/_freeze_module.c
    introduced in Python 3.11.
  - Fix build with PYTHON_FOR_REGEN=python3.8.
  - Specify the full path to the source location for make
    docclean (needed for cross-builds).
  - Don’t use vendored libmpdec headers if --with-system-libmpdec
    is passed to configure. Don’t use vendored libexpat headers
    if --with-system-expat is passed to !configure.
  - Fix the build process of clang compiler for _bootstrap_python
    if LTO optimization is applied. Patch by Matthias Görgens and
    Dong-hee Na.
  - wasm32-emscripten builds for browsers now include
    concurrent.futures for asyncio and unittest.mock.
  - wasm32-emscripten platform no longer builds resource module,
    getresuid(), getresgid(), and their setters. The APIs are
    stubs and not functional.
  - Updated pegen regeneration script on Windows to find and
    use Python 3.9 or higher. Prior to this, pegen regeneration
    already required 3.9 or higher, but the script may have used
    lower versions of Python.
  - Fix a bug in the previous bugfix that caused IDLE to
    not start when run with 3.10.8, 3.12.0a1, and at least
    Microsoft Python 3.10.2288.0 installed without the Lib/test
    package. 3.11.0 was never affected.
  - The wasm_build.py script now pre-builds Emscripten ports,
    checks for broken EMSDK versions, and warns about pkg-config
    env vars.
  - The new tool Tools/wasm/wasm_builder.py automates configure,
    compile, and test steps for building CPython on WebAssembly
    platforms.
  - Fix handling of module docstrings in Tools/i18n/pygettext.py.
  - PyBUF_* constants were marked as part of Limited API
    of Python 3.11+. These were available in 3.11.0 with
    Py_LIMITED_API defined for 3.11, and are necessary to use the
    buffer API.
  - Fix use-after-free in Py_SetPythonHome(NULL),
    Py_SetProgramName(NULL) and _Py_SetProgramFullPath(NULL)
    function calls. Issue reported by Benedikt Reinartz. Patch by
    Victor Stinner.
  - Py_InitializeEx now correctly calls PyConfig_Clear after
    initializing the interpreter (the omission didn’t cause a
    memory leak only because none of the dynamically allocated
    config fields are populated by the wrapper function)
- Removed upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mcepl@suse.com" date="1673352000">- Don't fail on Sphinx build warnings.
- For jsc#PED-1570, jsc#PED-2217 and jsc#PED-68,
  providing Python 3.11 for SLE-15-SP4.</changelog>
  <changelog author="dmueller@suse.com" date="1674561600">- build GLIBC hwcaps optimized versions of the interpreter</changelog>
  <changelog author="kukuk@suse.com" date="1674734400">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add python310 Obsoletes line to obsolete_python_versioned macro.</changelog>
  <changelog author="mcepl@suse.com" date="1677844800">- Update to 3.11.2:
  Bug fixes, no changes in API and no security bugs.</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.11.3:
  - Security
  - gh-101727: Updated the OpenSSL version used in Windows
    and macOS binary release builds to 1.1.1t to address
    CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the
    OpenSSL 2023-02-07 security advisory.
  - Core and Builtins
  - gh-101975: Fixed stacktop value on tracing entries to avoid
    corruption on garbage collection.
  - gh-102701: Fix overflow when creating very large dict.
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102281: Fix potential nullptr dereference and use of
    uninitialized memory in fileutils. Patch by Max Bachmann.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - gh-101696: Invalidate type version tag in
    _PyStaticType_Dealloc for static types, avoiding bug where
    a false cache hit could crash the interpreter. Patch by
    Kumar Aditya.
  - Library
  - gh-102549: Don’t ignore exceptions in member type creation.
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-102780: The asyncio.Timeout context manager now
    works reliably even when performing cleanup due to task
    cancellation. Previously it could raise a CancelledError
    instead of an TimeoutError in such cases.
  - gh-88965: typing: Fix a bug relating to substitution in   .
    Pacustom classes generic over a ParamSpec. Previously, if   .
    Pathe ParamSpec was substituted with a parameters list that .
    Paitself contained a TypeVar, the TypeVar in the parameters .
    Palist could not be subsequently substituted. This is now   .
    Pafixed tch by Nikita Sobolev                               .
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-102069: Fix __weakref__ descriptor generation for custom
    dataclasses.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-96127: inspect.signature was raising TypeError on
    call with mock objects. Now it correctly returns (*args,
  * *kwargs) as infered signature.
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-89792: test_tools now copies up to 10x less source data
    to a temporary directory during the freeze test by ignoring
    git metadata and other artifacts. It also limits its python
    build parallelism based on os.cpu_count instead of hard
    coding it as 8 cores.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Add 103213-fetch-CONFIG_ARGS.patch (gh#python/cpython#103053).
- Add skip_if_buildbot-extend.patch to avoid the bug altogether
  (extending what skip_if_buildbot covers).
- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  bsc#1203750 (CVE-2007-4559) and implementing "PEP 706 – Filter
  for tarfile.extractall".</changelog>
  <changelog author="mcepl@suse.com" date="1687780800">- Remove obsolete_python_versioned macro again. This mechanism
  has no business to be in Python 3.11, because we have abolished
  with it whole interpreter+setuptools+pip product. Python 3.11
  should not be replaced by later versions anymore.</changelog>
</package>
<package pkgid="60b57ab75530395760898373a2a73c41e22103bb34502dd743eedbd9edebb6f4" name="libpython3_11-1_0" arch="s390x">
  <version epoch="0" ver="3.11.3" rel="150400.9.12.1"/>
  <changelog author="mcepl@suse.com" date="1657800000">- Update to 3.11.0b4:
- Fixes many bugs and adds following more significant changes
- Security
  - gh-68966: The deprecated mailcap module now refuses to inject
    Coreunsafe text (filenames, MIME types, parameters) into
    shell Corecommands. Instead of using such text, it will
    warn and act Coreas if a match was not found (or for test
    commands, as if the Coretest failed). and Builtins
  - gh-93516: Lazily create a table mapping bytecode offsets to
    line numbers to speed up calculation of line numbers when
    tracing.
  - gh-93461: importlib.invalidate_caches() now drops entries
    from sys.path_importer_cache with a relative path as
    name. This solves a caching issue when a process changes its
    current working directory.
  - FileFinder no longer inserts a dot in the path, e.g.
    /egg/./spam is now /egg/spam.
  Library
  - gh-93896: Fix asyncio.run() and
    unittest.IsolatedAsyncioTestCase to always the set event loop
    as it was done in Python 3.10 and earlier. Patch by Kumar
    Aditya.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  Tools/Demos
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  C API
  - gh-93937: The following frame functions and type are now
    directly available with #include &lt;Python.h&gt;, it’s no longer
    needed to add #include &lt;frameobject.h&gt;:
    PyFrame_Check()
    PyFrame_GetBack()
    PyFrame_GetBuiltins()
    PyFrame_GetGenerator()
    PyFrame_GetGlobals()
    PyFrame_GetLasti()
    PyFrame_GetLocals()
    PyFrame_Type</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="mcepl@suse.com" date="1658836800">- Update to 3.11.0b5:
  - Core and Builtins
  - gh-93351: ast.AST node positions are now validated when
    provided to compile() and other related functions. If
    invalid positions are detected, a ValueError will be
    raised.
  - gh-94438: Fix an issue that caused extended opcode
    arguments and some conditional pops to be ignored when
    calculating valid jump targets for assignments to the
    f_lineno attribute of frame objects. In some cases, this
    could cause inconsistent internal state, resulting in a
    hard crash of the interpreter.
  - gh-95060: Undocumented PyCode_Addr2Location function now
    properly returns when addrq argument is less than zero.
  - gh-95113: Replace all EXTENDED_ARG_QUICK instructions
    with basic EXTENDED_ARG instructions in unquickened
    code. Consumers of non-adaptive bytecode should be able to
    handle extended arguments the same way they were handled in
    CPython 3.10 and older.
  - gh-91409: Fix incorrect source location info caused by
    certain optimizations in the bytecode compiler.
  - gh-94036: Fix incorrect source location info for some
    multi-line attribute accesses and method calls.
  - gh-94739: Allow jumping within, out of, and across
    exception handlers in the debugger.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than (3,
    9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than (3,
    8). Patch by Shantanu Jain.
  - gh-91256: Ensures the program name is known for help text
    during interpreter startup.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-94822: Fix an issue where lookups of metaclass
    descriptors may be ignored when an identically-named
    attribute also exists on the class itself.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-90699: Fix reference counting bug in
    bool.__repr__(). Patch by Kumar Aditya.
  - Library
  - gh-95087: Fix IndexError in parsing invalid date in the
    email module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-95132: Fix a sqlite3 regression where *args and **kwds
    were incorrectly relayed from connect() to the Connection
    factory. The regression was introduced in 3.11a1 with PR
    24421 (gh-85128). Patch by Erlend E. Aasland.`
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-95105: wsgiref.types.InputStream.__iter__() should
    return Iterator[bytes], not Iterable[bytes]. Patch by
    Shantanu Jain.
  - gh-94857: Fix refleak in
    _io.TextIOWrapper.reconfigure. Patch by Kumar Aditya.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - bpo-47025: Drop support for bytes on sys.path.
  - Tests
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - Build
  - gh-94847: Fixed _decimal module build issue on GCC when
    compiling with LTO and pydebug. Debug builds no longer
    force inlining of functions.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-94801: configure now uses custom flags like ZLIB_CFLAGS
    and ZLIB_LIBS when searching for headers and libraries.
  - gh-94773: deepfreeze.py now supports code object with
    frozensets that contain incompatible, unsortable types.
  - C API
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
  - gh-94731: Python again uses C-style casts for
    most casting operations when compiled with
    C++. This may trigger compiler warnings, if they
    are enabled with e.g. -Wold-style-cast `` or
    ``-Wzero-as-null-pointer-constant options for g++.</changelog>
  <changelog author="mcepl@suse.com" date="1660996800">- Update to 3.11.0rc1:
  - Core and Builtins
  - Update code object hashing and equality to consider all
    debugging and exception handling tables. This fixes an
    issue where certain non-identical code objects could be
    “deduplicated” during compilation.
  - _PyPegen_Parser_New now properly detects token memory
    allocation errors. Patch by Honglin Zhu.
  - Run Python code in tracer/profiler function at full
    speed. Fixes slowdown in earlier versions of 3.11.
  - Emit a warning in debug mode if an object does not call
    PyObject_GC_UnTrack() before deallocation. Patch by Pablo
    Galindo.
  - Prevented crashes in the AST constructor when
    compiling some absurdly long expressions like
    "+0"*1000000. RecursionError is now raised instead. Patch
    by Pablo Galindo
  - ast.AST node positions are now validated when provided to
    compile() and other related functions. If invalid positions
    are detected, a ValueError will be raised.
  - Fix error detection in some builtin functions when keyword
    argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - Library
  - Update bundled pip to 22.2.2.
  - Fix asyncio.TaskGroup to propagate exception when
    asyncio.CancelledError was replaced with another exception
    by a context manger. Patch by Kumar Aditya and Guido van
    Rossum.
  - Update bundled pip to 22.2.1.
  - Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - Fix asyncio.run() for asyncio.Task implementations without
    uncancel() method. Patch by Kumar Aditya.
  - Fix check for existence of os.EFD_CLOEXEC, os.EFD_NONBLOCK
    and os.EFD_SEMAPHORE flags on older kernel versions where
    these flags are not present. Patch by Kumar Aditya.
  - Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - Ensure that timeouts scheduled with asyncio.Timeout that
    have already expired are delivered promptly.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix findtext in the xml module to only give an empty string
    when the text attribute is set to None.
  - Documentation
  - Fix stylesheet not working in Windows CHM htmlhelp docs
    and add warning that they are deprecated. Contributed by
    C.A.M. Gerlach.
  - Update library documentation with availability information
    on WebAssembly platforms wasm32-emscripten and wasm32-wasi.
  - Use consistent syntax for platform availability. The
    directive now supports a content body and emits a warning
    when it encounters an unknown platform.
  - Document a limitation in ThreadPoolExecutor where its exit
    handler is executed before any handlers in atexit.
  - Tests
  - Lib/test/test_asyncio/test_ssl.py exposed a bug in the
    macOS kernel where intense concurrent load on non-blocking
    sockets occasionally causes errno.ENOBUFS (“No buffer space
    available”) to be emitted. FB11063974 filed with Apple, in
    the mean time as a workaround buffer size used in tests on
    macOS is decreased to avoid intermittent failures. Patch by
    Fantix King.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - Add a regression test for re exponentional slowdown when
    using rjsmin.
  - Build
  - Fix a regression in configure script that caused some
    header checks to ignore custom CPPFLAGS. The regression was
    introduced in gh-94802.
  - wasm32-wasi builds no longer depend on WASIX’s pthread
    stubs. Python now has its own stubbed pthread API.
  - Python now detects missing dup function in WASI and works
    around some missing errno, select, and socket constants.
  - Python now skips missing socket functions and methods on
    WASI. WASI can only create sockets from existing fd /
    accept and has no netdb.
  - Platforms wasm32-unknown-emscripten and wasm32-unknown-wasi
    have been promoted to PEP 11 tier 3 platform support.
  - IDLE
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).
  - Fix the Shell context menu copy-with-prompts bug of copying
    an extra line when one selects whole lines.
  - In the Edit menu, move Select All and add a new separator.
  - Enable using IDLE’s module browser with .pyw files.
  - Add .pyi as a recognized extension for IDLE on macOS. This
    allows opening stub files by double clicking on them in the
    Finder.
  - C API
  - Restore the 3.10 behavior for multiple inheritance of C
    extension classes that store their dictionary at the end of
    the struct.
  - Added PyCode_GetVarnames(), PyCode_GetCellvars() and
    PyCode_GetFreevars() for accessing co_varnames, co_cellvars
    and co_freevars respectively via the C API.</changelog>
  <changelog author="mcepl@suse.com" date="1660996801">- fix import_failed.map to refer to the python 3.11 package versions</changelog>
  <changelog author="schwab@suse.de" date="1662379200">- Increase testsuite timeout for test_freeze_simple_script</changelog>
  <changelog author="mcepl@suse.com" date="1663243200">- Update to 3.11.0rc2:
  - Converting between int and str in bases other than 2
    (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base
    10 (decimal) now raises a ValueError if the number of digits
    in string form is above a limit to avoid potential denial of
    service attacks due to the algorithmic complexity. This is
    a mitigation for CVE-2020-10735.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Fix case of undefined behavior in ceval.c
  - Do not expose KeyWrapper in _functools.
  - Ensure that tracing, sys.setrace(), is turned on
    immediately. In pre-release versions of 3.11, some tracing
    events might have been lost when turning on tracing in a
    __del__ method or interrupt.
  - Fix use after free in trace refs build mode. Patch by Kumar
    Aditya.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Make sure that incomplete frames do not show up in
    tracemalloc traces.
  - Remove two cases of undefined behavior, by adding NULL
    checks.
  - Fix possible NULL pointer dereference in
    _PyThread_CurrentFrames. Patch by Kumar Aditya.
  - Fix AttributeError missing name and obj attributes in
    object.__getattribute__(). Patch by Philip Georgi.
  - Loading a file with invalid UTF-8 will now report the broken
    character at the correct location.
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes. Patch by Pablo Galindo
  - Fix a deadlock in PyGILState_Ensure() when allocating new
    thread state. Patch by Kumar Aditya.
  - PyType_Ready() now initializes ht_cached_keys and performs
    additional checks to ensure that type objects are properly
    configured. This avoids crashes in 3rd party packages that
    don’t use regular API to create new types.
  - Skip over incomplete frames in PyThreadState_GetFrame().
  - Fix format string in _PyPegen_raise_error_known_location that
    can lead to memory corruption on some 64bit systems. The
    function was building a tuple with i (int) instead of n
    (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - Fix incorrect error message in the io module.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL. Patch by Victor Stinner.
  - Correct conversion of numbers.Rational’s to float.
  - Fix TypeVarTuple.__typing_prepare_subst__. TypeError was not
    raised when using more than one TypeVarTuple, like [*T, *V]
    in type alias substitutions.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Fix incorrect condition that causes sys.thread_info.name to
    be wrong on pthread platforms.
  - Remove an incompatible change from bpo-28080 that caused a
    regression that ignored the utf8 in ZipInfo.flag_bits. Patch
    by Pablo Galindo.
  - Fix asyncio.Runner to call asyncio.set_event_loop() only
    once to avoid calling attach_loop() multiple times on child
    watchers. Patch by Kumar Aditya.
  - Fix unittest.IsolatedAsyncioTestCase to set event loop before
    calling setup functions. Patch by Kumar Aditya.
  - When a task catches asyncio.CancelledError and raises some
    other error, the other error should generally not silently be
    suppressed.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on a
    Linux kernel with FIPS enabled.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks. Patch by Kumar Aditya.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from the
    lower level threading and multiprocessing modules.
  - What’s New 3.11 now has instructions for how to provide
    compiler and linker flags for Tcl/Tk and OpenSSL on RHEL 7
    and CentOS 7.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing. Patch by Ross Burton.
  - Build and test with OpenSSL 1.1.1q
- Use support-expat-CVE-2022-25236-patched.patch from the current
  version of gh#python/cpython#93900 instead of the old
  support-expat-245.patch.
- Reapply fix_configure_rst.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1666699200">- Update to 3.11.0 (overall changes from 3.10.*):
  - General changes
  - PEP 657 -- Include Fine-Grained Error Locations in
    Tracebacks
  - PEP 654 -- Exception Groups and except*
  - PEP 680 -- tomllib: Support for Parsing TOML in the
    Standard Library
  - gh-90908 -- Introduce task groups to asyncio
  - gh-34627 -- Atomic grouping ((?&gt;...)) and possessive
    quantifiers (*+, ++, ?+, {m,n}+) are now supported in
    regular expressions.
  - The Faster CPython Project is already yielding some
    exciting results. Python 3.11 is up to 10-60% faster than
    Python 3.10. On average, we measured a 1.22x speedup on the
    standard benchmark suite. See Faster CPython for details.
  - Typing and typing language changes
  - PEP 673 -- Self Type
  - PEP 646 -- Variadic Generics
  - PEP 675 -- Arbitrary Literal String Type
  - PEP 655 -- Marking individual TypedDict items as required
    or potentially-missing
  - PEP 681 -- Data Class Transforms
- (just changes from 3.11.0rc2):
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size. Issue reported by Jordan Limor. Patch by
    Victor Stinner.
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication
    with the forkserver process instead of the Linux abstract
    socket namespace. Only code that chooses to use the
    “forkserver” start method is affected. Abstract sockets have
    no permissions and could allow any user on the system in the
    same network namespace (often the whole system) to inject
    code into the multiprocessing forkserver process. This was
    a potential privilege escalation. Filesystem based socket
    permissions restrict this to the forkserver process user as
    was the default in Python 3.8 and earlier. This prevents
    Linux CVE-2022-42919.
  - Fix an issue where several frame objects could be backed by
    the same interpreter frame, possibly leading to corrupted
    memory and hard crashes of the interpreter.
  - Fix possible data corruption or crashes when accessing the
    f_back member of newly-created generator or coroutine frames.
  - Fix a crash occurring when PyEval_GetFrame() is called while
    the topmost Python frame is in a partially-initialized state.
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit. Patch by Victor
    Stinner.
  - Fix undefined behaviour in _testcapimodule.c.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message. Patch by Victor Stinner.
  - Correctly raise SyntaxError on exception groups (PEP 654) on
    python versions prior to 3.11
  - Document some places where an assignment expression needs
    parentheses.
  - Update the bundled copies of pip and setuptools to versions
    22.3 and 65.5.0 respectively.
  - fix Flag to use boundary CONFORM
  - This restores previous Flag behavior of allowing flags with
    non-sequential values to be combined; e.g.
  - class Skip(Flag): TWO = 2 EIGHT = 8
  - Skip.TWO | Skip.EIGHT -&gt; &lt;Skip.TWO|EIGHT: 10&gt;
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.11.1:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed
    to the stderr server lo This is done by changing the
    http.server BaseHTTPRequestHandler .log_message method to
    replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2022-45061).
  - Update bundled libexpat to 2.5.0
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. Issue reported
    and initial fix by Caleb Shortt. Patch by Victor Stinner.
  - Fix a crash when an object which does not have a dictionary
    frees its instance values.
  - Fix a bug in the tokenizer that could cause infinite
    recursion when showing syntax warnings that happen in the
    first line of the source. Patch by Pablo Galindo
  - Fix an issue that could cause frames to be visible to Python
    code as they are being torn down, possibly leading to memory
    corruption or hard crashes of the interpreter.
  - Fix a reference bug in _imp.create_builtin() after the
    creation of the first sub-interpreter for modules builtins
    and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if the
    tokenizer copies a line missing the newline caracter from a
    file that is as long as the available tokenizer buffer. Patch
    by Pablo galindo
  - Fix bug where an ExceptionGroup subclass can wrap a
    BaseException.
  - Fix zip path for venv created from a non-installed python on
    POSIX platforms.
  - Fix an issue that could potentially cause incorrect error
    handling for some bytecode instructions.
  - Fix an issue that prevented PyThreadState and
    PyInterpreterState memory from being freed properly.
  - Fix failure in except* with unhashable exceptions.
  - Fix calculation of sys._base_executable when inside a POSIX
    virtual environment using copies of the python binary when
    the base installation does not provide the executable name
    used by the venv. Calculation will fall back to alternative
    names (“python&lt;MAJOR&gt;”, “python&lt;MAJOR&gt;.&lt;MINOR&gt;”).
  - Update faulthandler to emit an error message with the proper
    unexpected signal number. Patch by Dong-hee Na.
  - Fix location of SyntaxError for a try block with both except
    and except*.
  - Fix the error reporting positions of specialized traceback
    anchors when the source line contains Unicode characters.
  - Fix subscription of type aliases containing bare generic
    types or types like TypeVar: for example tuple[A, T][int] and
    tuple[TypeVar, T][int], where A is a generic type, and T is a
    type variable.
  - Lower the recursion depth for marshal on WASI to support
    wasmtime 2.0/main.
  - Fix multiple crashes in debug mode when str subclasses are
    used instead of str itself.
  - Fix an issue where member descriptors (such as those for
    __slots__) could behave incorrectly or crash instead of
    raising a TypeError when accessed via an instance of an
    invalid type.
  - Suppress ImportError for invalid query for help()
    command. Patch by Dong-hee Na.
  - Fix detection of MAC addresses for uuid on certain OSs. Patch
    by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - os.sched_yield() now release the GIL while calling
    sched_yield(2). Patch by Dong-hee Na.
  - Fix an issue that could delay the specialization of PRECALL
    instructions.
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Ensure that all Python frame objects are backed by “complete”
    frames.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__(). Patch by Ofey Chan.
  - Fix the Python path configuration used to initialized
    sys.path at Python startup. Paths are no longer encoded
    to UTF-8/strict to avoid encoding errors if it contains
    surrogate characters (bytes paths are decoded with the
    surrogateescape error handler). Patch by Victor Stinner.
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting. Issue
    discovered and analyzed by Mingliang ZHAO. Patch by Victor
    Stinner.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Make sure that all frame objects created are created from
    valid interpreter frames. Prevents the possibility of invalid
    frames in backtraces and signal handlers.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - On WASI ENOTCAPABLE is now mapped to PermissionError. The
    errno modules exposes the new error number. getpath.py now
    ignores PermissionError when it cannot open landmark files
    pybuilddir.txt and pyenv.cfg.
  - Allow pdb to locate source for frozen modules in the standard
    library.
  - Raise ValueError instead of SystemError when methods of
    uninitialized io.IncrementalNewlineDecoder objects are
    called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when the opener
    returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a deprecation warning
    when a new event loop was created implicitly. It no longer
    emits a deprecation warning if the current event loop was
    set.
  - Fix bug when calling trace.CoverageResults with valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid blocking
    threads.
  - Fix ast.increment_lineno() to also cover ast.TypeIgnore when
    changing line numbers.
  - Fix bug in urllib.parse.urlparse() that causes URL schemes
    that begin with a digit, a plus sign, or a minus sign to be
    parsed incorrectly.
  - Check the number of arguments in substitution in user
    generics containing a TypeVarTuple and one or more TypeVar.
  - Fix substitution of ParamSpec followed by TypeVarTuple in
    generic aliases.
  - Fix substitution of TypeVarTuple and ParamSpec together in
    user generics.
  - Fixed bug where inspect.signature() reported incorrect
    arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not set during
    __initsubclass__.
  - Remove older version of
    _SSLProtocolTransport.get_write_buffer_limits in
    asyncio.sslproto
  - fix negative numbers failing in verify()
  - Fix statistics.NormalDist pickle with 0 and 1 protocols.
  - enum.auto() is now correctly activated when combined with
    other assignment values. E.g. ONE = auto(), 'some text' will
    now evaluate as (1, 'some text').
  - Update the bundled copy of pip to version 22.3.1.
  - Clean up refleak on failed module initialisation in _zoneinfo
  - Clean up refleaks on failed module initialisation in in
    _pickle
  - Clean up refleak on failed module initialisation in _io.
  - Fix memory leak in math.dist() when both points don’t have
    the same dimension. Patch by Kumar Aditya.
  - [3.11] Applied changes from importlib_metadata 4.11.4
    through 4.13, including compatibility and robustness
    fixes for Distribution objects without _normalized_name,
    disallowing invalid inputs to Distribution.from_name, and
    refined behaviors in PathDistribution._name_from_stem and
    PathDistribution._normalized_name.
  - Fix argument typechecks in _overlapped.WSAConnect() and
    _overlapped.Overlapped.WSASendTo() functions.
  - Prevent crashing in traceback when retrieving the byte-offset
    for some source files that contain certain unicode
    characters.
  - Fix internal error in the re module which in very rare
    circumstances prevented compilation of a regular expression
    containing a conditional expression without the “else”
    branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to protect
    concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in asyncio
    with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a self-referencing chained
    exception is raised
  - tkinter.Text.count() raises now an exception for options
    starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields and
    _asdict would include all six properties including processor.
  - A createSocket() method was added to SysLogHandler.
  - Fix bug in urllib.parse.urlparse() that causes certain port
    numbers containing whitespace, underscores, plus and minus
    signs, or non-ASCII digits to be incorrectly accepted.
  - Allow venv to pass along PYTHON* variables to ensurepip and
    pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in multi-threaded
    applications. On macOS, the libc syslog() function is not
    thread-safe, so syslog.syslog() no longer releases the GIL to
    call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Make sure patch.dict() can be applied on async functions.
  - Earlier in 3.11 we deprecated
    asyncio.Task.cancel("message"). We realized we were too
    harsh, and have undeprecated it.
  - Change deprecate warning message in unittest from It is
    deprecated to return a value!=None to It is deprecated to
    return a value that is not None from a test case
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Fix is_private properties in the ipaddress module. Previously
    non-private networks (0.0.0.0/0) would return True from this
    method; now they correctly return False.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output. Patch by Kumar Aditya.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix repr of Any subclasses.
  - Work around missing socket functions in socket’s __repr__.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix handling of bytes path-like objects in os.ismount().
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - To avoid apparent memory leaks when asyncio.open_connection()
    raises, break reference cycles generated by local exception
    and future instances (which has exception instance as its
    member var). Patch by Dong Uk, Kang.
  - Fixed flickering of the turtle window when the tracer is
    turned off. Patch by Shin-myoung-serp.
  - Fix asyncio subprocess transport to kill process cleanly
    when process is blocked and avoid RuntimeError when loop is
    closed. Patch by Kumar Aditya.
  - Prevent error when activating venv in nested fish instances.
  - TarFile.next() now returns None when called on an empty
    tarfile.
  - Document the optional callback parameter of WeakMethod. Patch
    by Géry Ogam.
  - Restrict use of sockets instead of pipes for stdin of
    subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the ignore_dangling_symlinks
    argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a store_true
    action is given an explicit argument.
  - Document that calling variadic functions with ctypes requires
    special care on macOS/arm64 (and possibly other platforms).
  - Remove extra row
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Restructured the documentation for the os.wait* family of
    functions, and improved the docs for os.waitid() with more
    explanation of the possible argument constants.
  - Skip test_normalization() of test_unicodedata if it
    fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Correct test_marsh on (32 bit) x86: test_deterministic sets
    was failing.
  - Optional big memory tests in test_sqlite3 now catch the
    correct sqlite.DataError exception type in case of too large
    strings and/or blobs passed.
  - Fix a bug in the typing tests where a test relying
    on CPython-specific implementation details was not
    decorated with @cpython_only and was not skipped on other
    implementations.
  - Add tests for star-unpacking with PEP 646, and some other
    miscellaneous PEP 646 tests.
  - Added explicit coverage of Py_Initialize (and hence
    Py_InitializeEx) back to the embedding tests (all other
    embedding tests migrated to Py_InitializeFromConfig in Python
    3.11)
  - Some C API tests were moved into the new Lib/test/test_capi/
    directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix a compilation issue with GCC 12 on macOS.
  - Fix -Wimplicit-int compiler warning in configure check for
    PTHREAD_SCOPE_SYSTEM.
  - Fix a possible fd leak in Programs/_freeze_module.c
    introduced in Python 3.11.
  - Fix build with PYTHON_FOR_REGEN=python3.8.
  - Specify the full path to the source location for make
    docclean (needed for cross-builds).
  - Don’t use vendored libmpdec headers if --with-system-libmpdec
    is passed to configure. Don’t use vendored libexpat headers
    if --with-system-expat is passed to !configure.
  - Fix the build process of clang compiler for _bootstrap_python
    if LTO optimization is applied. Patch by Matthias Görgens and
    Dong-hee Na.
  - wasm32-emscripten builds for browsers now include
    concurrent.futures for asyncio and unittest.mock.
  - wasm32-emscripten platform no longer builds resource module,
    getresuid(), getresgid(), and their setters. The APIs are
    stubs and not functional.
  - Updated pegen regeneration script on Windows to find and
    use Python 3.9 or higher. Prior to this, pegen regeneration
    already required 3.9 or higher, but the script may have used
    lower versions of Python.
  - Fix a bug in the previous bugfix that caused IDLE to
    not start when run with 3.10.8, 3.12.0a1, and at least
    Microsoft Python 3.10.2288.0 installed without the Lib/test
    package. 3.11.0 was never affected.
  - The wasm_build.py script now pre-builds Emscripten ports,
    checks for broken EMSDK versions, and warns about pkg-config
    env vars.
  - The new tool Tools/wasm/wasm_builder.py automates configure,
    compile, and test steps for building CPython on WebAssembly
    platforms.
  - Fix handling of module docstrings in Tools/i18n/pygettext.py.
  - PyBUF_* constants were marked as part of Limited API
    of Python 3.11+. These were available in 3.11.0 with
    Py_LIMITED_API defined for 3.11, and are necessary to use the
    buffer API.
  - Fix use-after-free in Py_SetPythonHome(NULL),
    Py_SetProgramName(NULL) and _Py_SetProgramFullPath(NULL)
    function calls. Issue reported by Benedikt Reinartz. Patch by
    Victor Stinner.
  - Py_InitializeEx now correctly calls PyConfig_Clear after
    initializing the interpreter (the omission didn’t cause a
    memory leak only because none of the dynamically allocated
    config fields are populated by the wrapper function)
- Removed upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mcepl@suse.com" date="1673352000">- Don't fail on Sphinx build warnings.
- For jsc#PED-1570, jsc#PED-2217 and jsc#PED-68,
  providing Python 3.11 for SLE-15-SP4.</changelog>
  <changelog author="dmueller@suse.com" date="1674561600">- build GLIBC hwcaps optimized versions of the interpreter</changelog>
  <changelog author="kukuk@suse.com" date="1674734400">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add python310 Obsoletes line to obsolete_python_versioned macro.</changelog>
  <changelog author="mcepl@suse.com" date="1677844800">- Update to 3.11.2:
  Bug fixes, no changes in API and no security bugs.</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.11.3:
  - Security
  - gh-101727: Updated the OpenSSL version used in Windows
    and macOS binary release builds to 1.1.1t to address
    CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the
    OpenSSL 2023-02-07 security advisory.
  - Core and Builtins
  - gh-101975: Fixed stacktop value on tracing entries to avoid
    corruption on garbage collection.
  - gh-102701: Fix overflow when creating very large dict.
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102281: Fix potential nullptr dereference and use of
    uninitialized memory in fileutils. Patch by Max Bachmann.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - gh-101696: Invalidate type version tag in
    _PyStaticType_Dealloc for static types, avoiding bug where
    a false cache hit could crash the interpreter. Patch by
    Kumar Aditya.
  - Library
  - gh-102549: Don’t ignore exceptions in member type creation.
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-102780: The asyncio.Timeout context manager now
    works reliably even when performing cleanup due to task
    cancellation. Previously it could raise a CancelledError
    instead of an TimeoutError in such cases.
  - gh-88965: typing: Fix a bug relating to substitution in   .
    Pacustom classes generic over a ParamSpec. Previously, if   .
    Pathe ParamSpec was substituted with a parameters list that .
    Paitself contained a TypeVar, the TypeVar in the parameters .
    Palist could not be subsequently substituted. This is now   .
    Pafixed tch by Nikita Sobolev                               .
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-102069: Fix __weakref__ descriptor generation for custom
    dataclasses.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-96127: inspect.signature was raising TypeError on
    call with mock objects. Now it correctly returns (*args,
  * *kwargs) as infered signature.
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-89792: test_tools now copies up to 10x less source data
    to a temporary directory during the freeze test by ignoring
    git metadata and other artifacts. It also limits its python
    build parallelism based on os.cpu_count instead of hard
    coding it as 8 cores.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Add 103213-fetch-CONFIG_ARGS.patch (gh#python/cpython#103053).
- Add skip_if_buildbot-extend.patch to avoid the bug altogether
  (extending what skip_if_buildbot covers).
- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  bsc#1203750 (CVE-2007-4559) and implementing "PEP 706 – Filter
  for tarfile.extractall".</changelog>
  <changelog author="mcepl@suse.com" date="1687780800">- Remove obsolete_python_versioned macro again. This mechanism
  has no business to be in Python 3.11, because we have abolished
  with it whole interpreter+setuptools+pip product. Python 3.11
  should not be replaced by later versions anymore.</changelog>
</package>
<package pkgid="f2b20ec7c6e395f7575dc637536bfcbcdf94dec518de869d9494e553abc3c592" name="libpython3_11-1_0" arch="x86_64">
  <version epoch="0" ver="3.11.3" rel="150400.9.12.1"/>
  <changelog author="mcepl@suse.com" date="1657800000">- Update to 3.11.0b4:
- Fixes many bugs and adds following more significant changes
- Security
  - gh-68966: The deprecated mailcap module now refuses to inject
    Coreunsafe text (filenames, MIME types, parameters) into
    shell Corecommands. Instead of using such text, it will
    warn and act Coreas if a match was not found (or for test
    commands, as if the Coretest failed). and Builtins
  - gh-93516: Lazily create a table mapping bytecode offsets to
    line numbers to speed up calculation of line numbers when
    tracing.
  - gh-93461: importlib.invalidate_caches() now drops entries
    from sys.path_importer_cache with a relative path as
    name. This solves a caching issue when a process changes its
    current working directory.
  - FileFinder no longer inserts a dot in the path, e.g.
    /egg/./spam is now /egg/spam.
  Library
  - gh-93896: Fix asyncio.run() and
    unittest.IsolatedAsyncioTestCase to always the set event loop
    as it was done in Python 3.10 and earlier. Patch by Kumar
    Aditya.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  Tools/Demos
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  C API
  - gh-93937: The following frame functions and type are now
    directly available with #include &lt;Python.h&gt;, it’s no longer
    needed to add #include &lt;frameobject.h&gt;:
    PyFrame_Check()
    PyFrame_GetBack()
    PyFrame_GetBuiltins()
    PyFrame_GetGenerator()
    PyFrame_GetGlobals()
    PyFrame_GetLasti()
    PyFrame_GetLocals()
    PyFrame_Type</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="mcepl@suse.com" date="1658836800">- Update to 3.11.0b5:
  - Core and Builtins
  - gh-93351: ast.AST node positions are now validated when
    provided to compile() and other related functions. If
    invalid positions are detected, a ValueError will be
    raised.
  - gh-94438: Fix an issue that caused extended opcode
    arguments and some conditional pops to be ignored when
    calculating valid jump targets for assignments to the
    f_lineno attribute of frame objects. In some cases, this
    could cause inconsistent internal state, resulting in a
    hard crash of the interpreter.
  - gh-95060: Undocumented PyCode_Addr2Location function now
    properly returns when addrq argument is less than zero.
  - gh-95113: Replace all EXTENDED_ARG_QUICK instructions
    with basic EXTENDED_ARG instructions in unquickened
    code. Consumers of non-adaptive bytecode should be able to
    handle extended arguments the same way they were handled in
    CPython 3.10 and older.
  - gh-91409: Fix incorrect source location info caused by
    certain optimizations in the bytecode compiler.
  - gh-94036: Fix incorrect source location info for some
    multi-line attribute accesses and method calls.
  - gh-94739: Allow jumping within, out of, and across
    exception handlers in the debugger.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than (3,
    9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than (3,
    8). Patch by Shantanu Jain.
  - gh-91256: Ensures the program name is known for help text
    during interpreter startup.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-94822: Fix an issue where lookups of metaclass
    descriptors may be ignored when an identically-named
    attribute also exists on the class itself.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-90699: Fix reference counting bug in
    bool.__repr__(). Patch by Kumar Aditya.
  - Library
  - gh-95087: Fix IndexError in parsing invalid date in the
    email module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-95132: Fix a sqlite3 regression where *args and **kwds
    were incorrectly relayed from connect() to the Connection
    factory. The regression was introduced in 3.11a1 with PR
    24421 (gh-85128). Patch by Erlend E. Aasland.`
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-95105: wsgiref.types.InputStream.__iter__() should
    return Iterator[bytes], not Iterable[bytes]. Patch by
    Shantanu Jain.
  - gh-94857: Fix refleak in
    _io.TextIOWrapper.reconfigure. Patch by Kumar Aditya.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - bpo-47025: Drop support for bytes on sys.path.
  - Tests
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - Build
  - gh-94847: Fixed _decimal module build issue on GCC when
    compiling with LTO and pydebug. Debug builds no longer
    force inlining of functions.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-94801: configure now uses custom flags like ZLIB_CFLAGS
    and ZLIB_LIBS when searching for headers and libraries.
  - gh-94773: deepfreeze.py now supports code object with
    frozensets that contain incompatible, unsortable types.
  - C API
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
  - gh-94731: Python again uses C-style casts for
    most casting operations when compiled with
    C++. This may trigger compiler warnings, if they
    are enabled with e.g. -Wold-style-cast `` or
    ``-Wzero-as-null-pointer-constant options for g++.</changelog>
  <changelog author="mcepl@suse.com" date="1660996800">- Update to 3.11.0rc1:
  - Core and Builtins
  - Update code object hashing and equality to consider all
    debugging and exception handling tables. This fixes an
    issue where certain non-identical code objects could be
    “deduplicated” during compilation.
  - _PyPegen_Parser_New now properly detects token memory
    allocation errors. Patch by Honglin Zhu.
  - Run Python code in tracer/profiler function at full
    speed. Fixes slowdown in earlier versions of 3.11.
  - Emit a warning in debug mode if an object does not call
    PyObject_GC_UnTrack() before deallocation. Patch by Pablo
    Galindo.
  - Prevented crashes in the AST constructor when
    compiling some absurdly long expressions like
    "+0"*1000000. RecursionError is now raised instead. Patch
    by Pablo Galindo
  - ast.AST node positions are now validated when provided to
    compile() and other related functions. If invalid positions
    are detected, a ValueError will be raised.
  - Fix error detection in some builtin functions when keyword
    argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - Library
  - Update bundled pip to 22.2.2.
  - Fix asyncio.TaskGroup to propagate exception when
    asyncio.CancelledError was replaced with another exception
    by a context manger. Patch by Kumar Aditya and Guido van
    Rossum.
  - Update bundled pip to 22.2.1.
  - Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - Fix asyncio.run() for asyncio.Task implementations without
    uncancel() method. Patch by Kumar Aditya.
  - Fix check for existence of os.EFD_CLOEXEC, os.EFD_NONBLOCK
    and os.EFD_SEMAPHORE flags on older kernel versions where
    these flags are not present. Patch by Kumar Aditya.
  - Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - Ensure that timeouts scheduled with asyncio.Timeout that
    have already expired are delivered promptly.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix findtext in the xml module to only give an empty string
    when the text attribute is set to None.
  - Documentation
  - Fix stylesheet not working in Windows CHM htmlhelp docs
    and add warning that they are deprecated. Contributed by
    C.A.M. Gerlach.
  - Update library documentation with availability information
    on WebAssembly platforms wasm32-emscripten and wasm32-wasi.
  - Use consistent syntax for platform availability. The
    directive now supports a content body and emits a warning
    when it encounters an unknown platform.
  - Document a limitation in ThreadPoolExecutor where its exit
    handler is executed before any handlers in atexit.
  - Tests
  - Lib/test/test_asyncio/test_ssl.py exposed a bug in the
    macOS kernel where intense concurrent load on non-blocking
    sockets occasionally causes errno.ENOBUFS (“No buffer space
    available”) to be emitted. FB11063974 filed with Apple, in
    the mean time as a workaround buffer size used in tests on
    macOS is decreased to avoid intermittent failures. Patch by
    Fantix King.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - Add a regression test for re exponentional slowdown when
    using rjsmin.
  - Build
  - Fix a regression in configure script that caused some
    header checks to ignore custom CPPFLAGS. The regression was
    introduced in gh-94802.
  - wasm32-wasi builds no longer depend on WASIX’s pthread
    stubs. Python now has its own stubbed pthread API.
  - Python now detects missing dup function in WASI and works
    around some missing errno, select, and socket constants.
  - Python now skips missing socket functions and methods on
    WASI. WASI can only create sockets from existing fd /
    accept and has no netdb.
  - Platforms wasm32-unknown-emscripten and wasm32-unknown-wasi
    have been promoted to PEP 11 tier 3 platform support.
  - IDLE
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).
  - Fix the Shell context menu copy-with-prompts bug of copying
    an extra line when one selects whole lines.
  - In the Edit menu, move Select All and add a new separator.
  - Enable using IDLE’s module browser with .pyw files.
  - Add .pyi as a recognized extension for IDLE on macOS. This
    allows opening stub files by double clicking on them in the
    Finder.
  - C API
  - Restore the 3.10 behavior for multiple inheritance of C
    extension classes that store their dictionary at the end of
    the struct.
  - Added PyCode_GetVarnames(), PyCode_GetCellvars() and
    PyCode_GetFreevars() for accessing co_varnames, co_cellvars
    and co_freevars respectively via the C API.</changelog>
  <changelog author="mcepl@suse.com" date="1660996801">- fix import_failed.map to refer to the python 3.11 package versions</changelog>
  <changelog author="schwab@suse.de" date="1662379200">- Increase testsuite timeout for test_freeze_simple_script</changelog>
  <changelog author="mcepl@suse.com" date="1663243200">- Update to 3.11.0rc2:
  - Converting between int and str in bases other than 2
    (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base
    10 (decimal) now raises a ValueError if the number of digits
    in string form is above a limit to avoid potential denial of
    service attacks due to the algorithmic complexity. This is
    a mitigation for CVE-2020-10735.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Fix case of undefined behavior in ceval.c
  - Do not expose KeyWrapper in _functools.
  - Ensure that tracing, sys.setrace(), is turned on
    immediately. In pre-release versions of 3.11, some tracing
    events might have been lost when turning on tracing in a
    __del__ method or interrupt.
  - Fix use after free in trace refs build mode. Patch by Kumar
    Aditya.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Make sure that incomplete frames do not show up in
    tracemalloc traces.
  - Remove two cases of undefined behavior, by adding NULL
    checks.
  - Fix possible NULL pointer dereference in
    _PyThread_CurrentFrames. Patch by Kumar Aditya.
  - Fix AttributeError missing name and obj attributes in
    object.__getattribute__(). Patch by Philip Georgi.
  - Loading a file with invalid UTF-8 will now report the broken
    character at the correct location.
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes. Patch by Pablo Galindo
  - Fix a deadlock in PyGILState_Ensure() when allocating new
    thread state. Patch by Kumar Aditya.
  - PyType_Ready() now initializes ht_cached_keys and performs
    additional checks to ensure that type objects are properly
    configured. This avoids crashes in 3rd party packages that
    don’t use regular API to create new types.
  - Skip over incomplete frames in PyThreadState_GetFrame().
  - Fix format string in _PyPegen_raise_error_known_location that
    can lead to memory corruption on some 64bit systems. The
    function was building a tuple with i (int) instead of n
    (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - Fix incorrect error message in the io module.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL. Patch by Victor Stinner.
  - Correct conversion of numbers.Rational’s to float.
  - Fix TypeVarTuple.__typing_prepare_subst__. TypeError was not
    raised when using more than one TypeVarTuple, like [*T, *V]
    in type alias substitutions.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Fix incorrect condition that causes sys.thread_info.name to
    be wrong on pthread platforms.
  - Remove an incompatible change from bpo-28080 that caused a
    regression that ignored the utf8 in ZipInfo.flag_bits. Patch
    by Pablo Galindo.
  - Fix asyncio.Runner to call asyncio.set_event_loop() only
    once to avoid calling attach_loop() multiple times on child
    watchers. Patch by Kumar Aditya.
  - Fix unittest.IsolatedAsyncioTestCase to set event loop before
    calling setup functions. Patch by Kumar Aditya.
  - When a task catches asyncio.CancelledError and raises some
    other error, the other error should generally not silently be
    suppressed.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on a
    Linux kernel with FIPS enabled.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks. Patch by Kumar Aditya.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from the
    lower level threading and multiprocessing modules.
  - What’s New 3.11 now has instructions for how to provide
    compiler and linker flags for Tcl/Tk and OpenSSL on RHEL 7
    and CentOS 7.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing. Patch by Ross Burton.
  - Build and test with OpenSSL 1.1.1q
- Use support-expat-CVE-2022-25236-patched.patch from the current
  version of gh#python/cpython#93900 instead of the old
  support-expat-245.patch.
- Reapply fix_configure_rst.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1666699200">- Update to 3.11.0 (overall changes from 3.10.*):
  - General changes
  - PEP 657 -- Include Fine-Grained Error Locations in
    Tracebacks
  - PEP 654 -- Exception Groups and except*
  - PEP 680 -- tomllib: Support for Parsing TOML in the
    Standard Library
  - gh-90908 -- Introduce task groups to asyncio
  - gh-34627 -- Atomic grouping ((?&gt;...)) and possessive
    quantifiers (*+, ++, ?+, {m,n}+) are now supported in
    regular expressions.
  - The Faster CPython Project is already yielding some
    exciting results. Python 3.11 is up to 10-60% faster than
    Python 3.10. On average, we measured a 1.22x speedup on the
    standard benchmark suite. See Faster CPython for details.
  - Typing and typing language changes
  - PEP 673 -- Self Type
  - PEP 646 -- Variadic Generics
  - PEP 675 -- Arbitrary Literal String Type
  - PEP 655 -- Marking individual TypedDict items as required
    or potentially-missing
  - PEP 681 -- Data Class Transforms
- (just changes from 3.11.0rc2):
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size. Issue reported by Jordan Limor. Patch by
    Victor Stinner.
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication
    with the forkserver process instead of the Linux abstract
    socket namespace. Only code that chooses to use the
    “forkserver” start method is affected. Abstract sockets have
    no permissions and could allow any user on the system in the
    same network namespace (often the whole system) to inject
    code into the multiprocessing forkserver process. This was
    a potential privilege escalation. Filesystem based socket
    permissions restrict this to the forkserver process user as
    was the default in Python 3.8 and earlier. This prevents
    Linux CVE-2022-42919.
  - Fix an issue where several frame objects could be backed by
    the same interpreter frame, possibly leading to corrupted
    memory and hard crashes of the interpreter.
  - Fix possible data corruption or crashes when accessing the
    f_back member of newly-created generator or coroutine frames.
  - Fix a crash occurring when PyEval_GetFrame() is called while
    the topmost Python frame is in a partially-initialized state.
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit. Patch by Victor
    Stinner.
  - Fix undefined behaviour in _testcapimodule.c.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message. Patch by Victor Stinner.
  - Correctly raise SyntaxError on exception groups (PEP 654) on
    python versions prior to 3.11
  - Document some places where an assignment expression needs
    parentheses.
  - Update the bundled copies of pip and setuptools to versions
    22.3 and 65.5.0 respectively.
  - fix Flag to use boundary CONFORM
  - This restores previous Flag behavior of allowing flags with
    non-sequential values to be combined; e.g.
  - class Skip(Flag): TWO = 2 EIGHT = 8
  - Skip.TWO | Skip.EIGHT -&gt; &lt;Skip.TWO|EIGHT: 10&gt;
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.11.1:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed
    to the stderr server lo This is done by changing the
    http.server BaseHTTPRequestHandler .log_message method to
    replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2022-45061).
  - Update bundled libexpat to 2.5.0
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. Issue reported
    and initial fix by Caleb Shortt. Patch by Victor Stinner.
  - Fix a crash when an object which does not have a dictionary
    frees its instance values.
  - Fix a bug in the tokenizer that could cause infinite
    recursion when showing syntax warnings that happen in the
    first line of the source. Patch by Pablo Galindo
  - Fix an issue that could cause frames to be visible to Python
    code as they are being torn down, possibly leading to memory
    corruption or hard crashes of the interpreter.
  - Fix a reference bug in _imp.create_builtin() after the
    creation of the first sub-interpreter for modules builtins
    and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if the
    tokenizer copies a line missing the newline caracter from a
    file that is as long as the available tokenizer buffer. Patch
    by Pablo galindo
  - Fix bug where an ExceptionGroup subclass can wrap a
    BaseException.
  - Fix zip path for venv created from a non-installed python on
    POSIX platforms.
  - Fix an issue that could potentially cause incorrect error
    handling for some bytecode instructions.
  - Fix an issue that prevented PyThreadState and
    PyInterpreterState memory from being freed properly.
  - Fix failure in except* with unhashable exceptions.
  - Fix calculation of sys._base_executable when inside a POSIX
    virtual environment using copies of the python binary when
    the base installation does not provide the executable name
    used by the venv. Calculation will fall back to alternative
    names (“python&lt;MAJOR&gt;”, “python&lt;MAJOR&gt;.&lt;MINOR&gt;”).
  - Update faulthandler to emit an error message with the proper
    unexpected signal number. Patch by Dong-hee Na.
  - Fix location of SyntaxError for a try block with both except
    and except*.
  - Fix the error reporting positions of specialized traceback
    anchors when the source line contains Unicode characters.
  - Fix subscription of type aliases containing bare generic
    types or types like TypeVar: for example tuple[A, T][int] and
    tuple[TypeVar, T][int], where A is a generic type, and T is a
    type variable.
  - Lower the recursion depth for marshal on WASI to support
    wasmtime 2.0/main.
  - Fix multiple crashes in debug mode when str subclasses are
    used instead of str itself.
  - Fix an issue where member descriptors (such as those for
    __slots__) could behave incorrectly or crash instead of
    raising a TypeError when accessed via an instance of an
    invalid type.
  - Suppress ImportError for invalid query for help()
    command. Patch by Dong-hee Na.
  - Fix detection of MAC addresses for uuid on certain OSs. Patch
    by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - os.sched_yield() now release the GIL while calling
    sched_yield(2). Patch by Dong-hee Na.
  - Fix an issue that could delay the specialization of PRECALL
    instructions.
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Ensure that all Python frame objects are backed by “complete”
    frames.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__(). Patch by Ofey Chan.
  - Fix the Python path configuration used to initialized
    sys.path at Python startup. Paths are no longer encoded
    to UTF-8/strict to avoid encoding errors if it contains
    surrogate characters (bytes paths are decoded with the
    surrogateescape error handler). Patch by Victor Stinner.
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting. Issue
    discovered and analyzed by Mingliang ZHAO. Patch by Victor
    Stinner.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Make sure that all frame objects created are created from
    valid interpreter frames. Prevents the possibility of invalid
    frames in backtraces and signal handlers.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - On WASI ENOTCAPABLE is now mapped to PermissionError. The
    errno modules exposes the new error number. getpath.py now
    ignores PermissionError when it cannot open landmark files
    pybuilddir.txt and pyenv.cfg.
  - Allow pdb to locate source for frozen modules in the standard
    library.
  - Raise ValueError instead of SystemError when methods of
    uninitialized io.IncrementalNewlineDecoder objects are
    called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when the opener
    returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a deprecation warning
    when a new event loop was created implicitly. It no longer
    emits a deprecation warning if the current event loop was
    set.
  - Fix bug when calling trace.CoverageResults with valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid blocking
    threads.
  - Fix ast.increment_lineno() to also cover ast.TypeIgnore when
    changing line numbers.
  - Fix bug in urllib.parse.urlparse() that causes URL schemes
    that begin with a digit, a plus sign, or a minus sign to be
    parsed incorrectly.
  - Check the number of arguments in substitution in user
    generics containing a TypeVarTuple and one or more TypeVar.
  - Fix substitution of ParamSpec followed by TypeVarTuple in
    generic aliases.
  - Fix substitution of TypeVarTuple and ParamSpec together in
    user generics.
  - Fixed bug where inspect.signature() reported incorrect
    arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not set during
    __initsubclass__.
  - Remove older version of
    _SSLProtocolTransport.get_write_buffer_limits in
    asyncio.sslproto
  - fix negative numbers failing in verify()
  - Fix statistics.NormalDist pickle with 0 and 1 protocols.
  - enum.auto() is now correctly activated when combined with
    other assignment values. E.g. ONE = auto(), 'some text' will
    now evaluate as (1, 'some text').
  - Update the bundled copy of pip to version 22.3.1.
  - Clean up refleak on failed module initialisation in _zoneinfo
  - Clean up refleaks on failed module initialisation in in
    _pickle
  - Clean up refleak on failed module initialisation in _io.
  - Fix memory leak in math.dist() when both points don’t have
    the same dimension. Patch by Kumar Aditya.
  - [3.11] Applied changes from importlib_metadata 4.11.4
    through 4.13, including compatibility and robustness
    fixes for Distribution objects without _normalized_name,
    disallowing invalid inputs to Distribution.from_name, and
    refined behaviors in PathDistribution._name_from_stem and
    PathDistribution._normalized_name.
  - Fix argument typechecks in _overlapped.WSAConnect() and
    _overlapped.Overlapped.WSASendTo() functions.
  - Prevent crashing in traceback when retrieving the byte-offset
    for some source files that contain certain unicode
    characters.
  - Fix internal error in the re module which in very rare
    circumstances prevented compilation of a regular expression
    containing a conditional expression without the “else”
    branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to protect
    concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in asyncio
    with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a self-referencing chained
    exception is raised
  - tkinter.Text.count() raises now an exception for options
    starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields and
    _asdict would include all six properties including processor.
  - A createSocket() method was added to SysLogHandler.
  - Fix bug in urllib.parse.urlparse() that causes certain port
    numbers containing whitespace, underscores, plus and minus
    signs, or non-ASCII digits to be incorrectly accepted.
  - Allow venv to pass along PYTHON* variables to ensurepip and
    pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in multi-threaded
    applications. On macOS, the libc syslog() function is not
    thread-safe, so syslog.syslog() no longer releases the GIL to
    call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Make sure patch.dict() can be applied on async functions.
  - Earlier in 3.11 we deprecated
    asyncio.Task.cancel("message"). We realized we were too
    harsh, and have undeprecated it.
  - Change deprecate warning message in unittest from It is
    deprecated to return a value!=None to It is deprecated to
    return a value that is not None from a test case
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Fix is_private properties in the ipaddress module. Previously
    non-private networks (0.0.0.0/0) would return True from this
    method; now they correctly return False.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output. Patch by Kumar Aditya.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix repr of Any subclasses.
  - Work around missing socket functions in socket’s __repr__.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix handling of bytes path-like objects in os.ismount().
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - To avoid apparent memory leaks when asyncio.open_connection()
    raises, break reference cycles generated by local exception
    and future instances (which has exception instance as its
    member var). Patch by Dong Uk, Kang.
  - Fixed flickering of the turtle window when the tracer is
    turned off. Patch by Shin-myoung-serp.
  - Fix asyncio subprocess transport to kill process cleanly
    when process is blocked and avoid RuntimeError when loop is
    closed. Patch by Kumar Aditya.
  - Prevent error when activating venv in nested fish instances.
  - TarFile.next() now returns None when called on an empty
    tarfile.
  - Document the optional callback parameter of WeakMethod. Patch
    by Géry Ogam.
  - Restrict use of sockets instead of pipes for stdin of
    subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the ignore_dangling_symlinks
    argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a store_true
    action is given an explicit argument.
  - Document that calling variadic functions with ctypes requires
    special care on macOS/arm64 (and possibly other platforms).
  - Remove extra row
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Restructured the documentation for the os.wait* family of
    functions, and improved the docs for os.waitid() with more
    explanation of the possible argument constants.
  - Skip test_normalization() of test_unicodedata if it
    fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Correct test_marsh on (32 bit) x86: test_deterministic sets
    was failing.
  - Optional big memory tests in test_sqlite3 now catch the
    correct sqlite.DataError exception type in case of too large
    strings and/or blobs passed.
  - Fix a bug in the typing tests where a test relying
    on CPython-specific implementation details was not
    decorated with @cpython_only and was not skipped on other
    implementations.
  - Add tests for star-unpacking with PEP 646, and some other
    miscellaneous PEP 646 tests.
  - Added explicit coverage of Py_Initialize (and hence
    Py_InitializeEx) back to the embedding tests (all other
    embedding tests migrated to Py_InitializeFromConfig in Python
    3.11)
  - Some C API tests were moved into the new Lib/test/test_capi/
    directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix a compilation issue with GCC 12 on macOS.
  - Fix -Wimplicit-int compiler warning in configure check for
    PTHREAD_SCOPE_SYSTEM.
  - Fix a possible fd leak in Programs/_freeze_module.c
    introduced in Python 3.11.
  - Fix build with PYTHON_FOR_REGEN=python3.8.
  - Specify the full path to the source location for make
    docclean (needed for cross-builds).
  - Don’t use vendored libmpdec headers if --with-system-libmpdec
    is passed to configure. Don’t use vendored libexpat headers
    if --with-system-expat is passed to !configure.
  - Fix the build process of clang compiler for _bootstrap_python
    if LTO optimization is applied. Patch by Matthias Görgens and
    Dong-hee Na.
  - wasm32-emscripten builds for browsers now include
    concurrent.futures for asyncio and unittest.mock.
  - wasm32-emscripten platform no longer builds resource module,
    getresuid(), getresgid(), and their setters. The APIs are
    stubs and not functional.
  - Updated pegen regeneration script on Windows to find and
    use Python 3.9 or higher. Prior to this, pegen regeneration
    already required 3.9 or higher, but the script may have used
    lower versions of Python.
  - Fix a bug in the previous bugfix that caused IDLE to
    not start when run with 3.10.8, 3.12.0a1, and at least
    Microsoft Python 3.10.2288.0 installed without the Lib/test
    package. 3.11.0 was never affected.
  - The wasm_build.py script now pre-builds Emscripten ports,
    checks for broken EMSDK versions, and warns about pkg-config
    env vars.
  - The new tool Tools/wasm/wasm_builder.py automates configure,
    compile, and test steps for building CPython on WebAssembly
    platforms.
  - Fix handling of module docstrings in Tools/i18n/pygettext.py.
  - PyBUF_* constants were marked as part of Limited API
    of Python 3.11+. These were available in 3.11.0 with
    Py_LIMITED_API defined for 3.11, and are necessary to use the
    buffer API.
  - Fix use-after-free in Py_SetPythonHome(NULL),
    Py_SetProgramName(NULL) and _Py_SetProgramFullPath(NULL)
    function calls. Issue reported by Benedikt Reinartz. Patch by
    Victor Stinner.
  - Py_InitializeEx now correctly calls PyConfig_Clear after
    initializing the interpreter (the omission didn’t cause a
    memory leak only because none of the dynamically allocated
    config fields are populated by the wrapper function)
- Removed upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mcepl@suse.com" date="1673352000">- Don't fail on Sphinx build warnings.
- For jsc#PED-1570, jsc#PED-2217 and jsc#PED-68,
  providing Python 3.11 for SLE-15-SP4.</changelog>
  <changelog author="dmueller@suse.com" date="1674561600">- build GLIBC hwcaps optimized versions of the interpreter</changelog>
  <changelog author="kukuk@suse.com" date="1674734400">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add python310 Obsoletes line to obsolete_python_versioned macro.</changelog>
  <changelog author="mcepl@suse.com" date="1677844800">- Update to 3.11.2:
  Bug fixes, no changes in API and no security bugs.</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.11.3:
  - Security
  - gh-101727: Updated the OpenSSL version used in Windows
    and macOS binary release builds to 1.1.1t to address
    CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the
    OpenSSL 2023-02-07 security advisory.
  - Core and Builtins
  - gh-101975: Fixed stacktop value on tracing entries to avoid
    corruption on garbage collection.
  - gh-102701: Fix overflow when creating very large dict.
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102281: Fix potential nullptr dereference and use of
    uninitialized memory in fileutils. Patch by Max Bachmann.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - gh-101696: Invalidate type version tag in
    _PyStaticType_Dealloc for static types, avoiding bug where
    a false cache hit could crash the interpreter. Patch by
    Kumar Aditya.
  - Library
  - gh-102549: Don’t ignore exceptions in member type creation.
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-102780: The asyncio.Timeout context manager now
    works reliably even when performing cleanup due to task
    cancellation. Previously it could raise a CancelledError
    instead of an TimeoutError in such cases.
  - gh-88965: typing: Fix a bug relating to substitution in   .
    Pacustom classes generic over a ParamSpec. Previously, if   .
    Pathe ParamSpec was substituted with a parameters list that .
    Paitself contained a TypeVar, the TypeVar in the parameters .
    Palist could not be subsequently substituted. This is now   .
    Pafixed tch by Nikita Sobolev                               .
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-102069: Fix __weakref__ descriptor generation for custom
    dataclasses.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-96127: inspect.signature was raising TypeError on
    call with mock objects. Now it correctly returns (*args,
  * *kwargs) as infered signature.
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-89792: test_tools now copies up to 10x less source data
    to a temporary directory during the freeze test by ignoring
    git metadata and other artifacts. It also limits its python
    build parallelism based on os.cpu_count instead of hard
    coding it as 8 cores.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Add 103213-fetch-CONFIG_ARGS.patch (gh#python/cpython#103053).
- Add skip_if_buildbot-extend.patch to avoid the bug altogether
  (extending what skip_if_buildbot covers).
- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  bsc#1203750 (CVE-2007-4559) and implementing "PEP 706 – Filter
  for tarfile.extractall".</changelog>
  <changelog author="mcepl@suse.com" date="1687780800">- Remove obsolete_python_versioned macro again. This mechanism
  has no business to be in Python 3.11, because we have abolished
  with it whole interpreter+setuptools+pip product. Python 3.11
  should not be replaced by later versions anymore.</changelog>
</package>
<package pkgid="a595ae526652ebb953ec3f341f4ca0d555ca34ebf437c868e8c9599efaf5d72c" name="libpython3_11-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.11.3" rel="150400.9.12.1"/>
  <changelog author="mcepl@suse.com" date="1657800000">- Update to 3.11.0b4:
- Fixes many bugs and adds following more significant changes
- Security
  - gh-68966: The deprecated mailcap module now refuses to inject
    Coreunsafe text (filenames, MIME types, parameters) into
    shell Corecommands. Instead of using such text, it will
    warn and act Coreas if a match was not found (or for test
    commands, as if the Coretest failed). and Builtins
  - gh-93516: Lazily create a table mapping bytecode offsets to
    line numbers to speed up calculation of line numbers when
    tracing.
  - gh-93461: importlib.invalidate_caches() now drops entries
    from sys.path_importer_cache with a relative path as
    name. This solves a caching issue when a process changes its
    current working directory.
  - FileFinder no longer inserts a dot in the path, e.g.
    /egg/./spam is now /egg/spam.
  Library
  - gh-93896: Fix asyncio.run() and
    unittest.IsolatedAsyncioTestCase to always the set event loop
    as it was done in Python 3.10 and earlier. Patch by Kumar
    Aditya.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  Tools/Demos
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  C API
  - gh-93937: The following frame functions and type are now
    directly available with #include &lt;Python.h&gt;, it’s no longer
    needed to add #include &lt;frameobject.h&gt;:
    PyFrame_Check()
    PyFrame_GetBack()
    PyFrame_GetBuiltins()
    PyFrame_GetGenerator()
    PyFrame_GetGlobals()
    PyFrame_GetLasti()
    PyFrame_GetLocals()
    PyFrame_Type</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="mcepl@suse.com" date="1658836800">- Update to 3.11.0b5:
  - Core and Builtins
  - gh-93351: ast.AST node positions are now validated when
    provided to compile() and other related functions. If
    invalid positions are detected, a ValueError will be
    raised.
  - gh-94438: Fix an issue that caused extended opcode
    arguments and some conditional pops to be ignored when
    calculating valid jump targets for assignments to the
    f_lineno attribute of frame objects. In some cases, this
    could cause inconsistent internal state, resulting in a
    hard crash of the interpreter.
  - gh-95060: Undocumented PyCode_Addr2Location function now
    properly returns when addrq argument is less than zero.
  - gh-95113: Replace all EXTENDED_ARG_QUICK instructions
    with basic EXTENDED_ARG instructions in unquickened
    code. Consumers of non-adaptive bytecode should be able to
    handle extended arguments the same way they were handled in
    CPython 3.10 and older.
  - gh-91409: Fix incorrect source location info caused by
    certain optimizations in the bytecode compiler.
  - gh-94036: Fix incorrect source location info for some
    multi-line attribute accesses and method calls.
  - gh-94739: Allow jumping within, out of, and across
    exception handlers in the debugger.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than (3,
    9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than (3,
    8). Patch by Shantanu Jain.
  - gh-91256: Ensures the program name is known for help text
    during interpreter startup.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-94822: Fix an issue where lookups of metaclass
    descriptors may be ignored when an identically-named
    attribute also exists on the class itself.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-90699: Fix reference counting bug in
    bool.__repr__(). Patch by Kumar Aditya.
  - Library
  - gh-95087: Fix IndexError in parsing invalid date in the
    email module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-95132: Fix a sqlite3 regression where *args and **kwds
    were incorrectly relayed from connect() to the Connection
    factory. The regression was introduced in 3.11a1 with PR
    24421 (gh-85128). Patch by Erlend E. Aasland.`
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-95105: wsgiref.types.InputStream.__iter__() should
    return Iterator[bytes], not Iterable[bytes]. Patch by
    Shantanu Jain.
  - gh-94857: Fix refleak in
    _io.TextIOWrapper.reconfigure. Patch by Kumar Aditya.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - bpo-47025: Drop support for bytes on sys.path.
  - Tests
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - Build
  - gh-94847: Fixed _decimal module build issue on GCC when
    compiling with LTO and pydebug. Debug builds no longer
    force inlining of functions.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-94801: configure now uses custom flags like ZLIB_CFLAGS
    and ZLIB_LIBS when searching for headers and libraries.
  - gh-94773: deepfreeze.py now supports code object with
    frozensets that contain incompatible, unsortable types.
  - C API
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
  - gh-94731: Python again uses C-style casts for
    most casting operations when compiled with
    C++. This may trigger compiler warnings, if they
    are enabled with e.g. -Wold-style-cast `` or
    ``-Wzero-as-null-pointer-constant options for g++.</changelog>
  <changelog author="mcepl@suse.com" date="1660996800">- Update to 3.11.0rc1:
  - Core and Builtins
  - Update code object hashing and equality to consider all
    debugging and exception handling tables. This fixes an
    issue where certain non-identical code objects could be
    “deduplicated” during compilation.
  - _PyPegen_Parser_New now properly detects token memory
    allocation errors. Patch by Honglin Zhu.
  - Run Python code in tracer/profiler function at full
    speed. Fixes slowdown in earlier versions of 3.11.
  - Emit a warning in debug mode if an object does not call
    PyObject_GC_UnTrack() before deallocation. Patch by Pablo
    Galindo.
  - Prevented crashes in the AST constructor when
    compiling some absurdly long expressions like
    "+0"*1000000. RecursionError is now raised instead. Patch
    by Pablo Galindo
  - ast.AST node positions are now validated when provided to
    compile() and other related functions. If invalid positions
    are detected, a ValueError will be raised.
  - Fix error detection in some builtin functions when keyword
    argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - Library
  - Update bundled pip to 22.2.2.
  - Fix asyncio.TaskGroup to propagate exception when
    asyncio.CancelledError was replaced with another exception
    by a context manger. Patch by Kumar Aditya and Guido van
    Rossum.
  - Update bundled pip to 22.2.1.
  - Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - Fix asyncio.run() for asyncio.Task implementations without
    uncancel() method. Patch by Kumar Aditya.
  - Fix check for existence of os.EFD_CLOEXEC, os.EFD_NONBLOCK
    and os.EFD_SEMAPHORE flags on older kernel versions where
    these flags are not present. Patch by Kumar Aditya.
  - Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - Ensure that timeouts scheduled with asyncio.Timeout that
    have already expired are delivered promptly.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix findtext in the xml module to only give an empty string
    when the text attribute is set to None.
  - Documentation
  - Fix stylesheet not working in Windows CHM htmlhelp docs
    and add warning that they are deprecated. Contributed by
    C.A.M. Gerlach.
  - Update library documentation with availability information
    on WebAssembly platforms wasm32-emscripten and wasm32-wasi.
  - Use consistent syntax for platform availability. The
    directive now supports a content body and emits a warning
    when it encounters an unknown platform.
  - Document a limitation in ThreadPoolExecutor where its exit
    handler is executed before any handlers in atexit.
  - Tests
  - Lib/test/test_asyncio/test_ssl.py exposed a bug in the
    macOS kernel where intense concurrent load on non-blocking
    sockets occasionally causes errno.ENOBUFS (“No buffer space
    available”) to be emitted. FB11063974 filed with Apple, in
    the mean time as a workaround buffer size used in tests on
    macOS is decreased to avoid intermittent failures. Patch by
    Fantix King.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - Add a regression test for re exponentional slowdown when
    using rjsmin.
  - Build
  - Fix a regression in configure script that caused some
    header checks to ignore custom CPPFLAGS. The regression was
    introduced in gh-94802.
  - wasm32-wasi builds no longer depend on WASIX’s pthread
    stubs. Python now has its own stubbed pthread API.
  - Python now detects missing dup function in WASI and works
    around some missing errno, select, and socket constants.
  - Python now skips missing socket functions and methods on
    WASI. WASI can only create sockets from existing fd /
    accept and has no netdb.
  - Platforms wasm32-unknown-emscripten and wasm32-unknown-wasi
    have been promoted to PEP 11 tier 3 platform support.
  - IDLE
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).
  - Fix the Shell context menu copy-with-prompts bug of copying
    an extra line when one selects whole lines.
  - In the Edit menu, move Select All and add a new separator.
  - Enable using IDLE’s module browser with .pyw files.
  - Add .pyi as a recognized extension for IDLE on macOS. This
    allows opening stub files by double clicking on them in the
    Finder.
  - C API
  - Restore the 3.10 behavior for multiple inheritance of C
    extension classes that store their dictionary at the end of
    the struct.
  - Added PyCode_GetVarnames(), PyCode_GetCellvars() and
    PyCode_GetFreevars() for accessing co_varnames, co_cellvars
    and co_freevars respectively via the C API.</changelog>
  <changelog author="mcepl@suse.com" date="1660996801">- fix import_failed.map to refer to the python 3.11 package versions</changelog>
  <changelog author="schwab@suse.de" date="1662379200">- Increase testsuite timeout for test_freeze_simple_script</changelog>
  <changelog author="mcepl@suse.com" date="1663243200">- Update to 3.11.0rc2:
  - Converting between int and str in bases other than 2
    (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base
    10 (decimal) now raises a ValueError if the number of digits
    in string form is above a limit to avoid potential denial of
    service attacks due to the algorithmic complexity. This is
    a mitigation for CVE-2020-10735.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Fix case of undefined behavior in ceval.c
  - Do not expose KeyWrapper in _functools.
  - Ensure that tracing, sys.setrace(), is turned on
    immediately. In pre-release versions of 3.11, some tracing
    events might have been lost when turning on tracing in a
    __del__ method or interrupt.
  - Fix use after free in trace refs build mode. Patch by Kumar
    Aditya.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Make sure that incomplete frames do not show up in
    tracemalloc traces.
  - Remove two cases of undefined behavior, by adding NULL
    checks.
  - Fix possible NULL pointer dereference in
    _PyThread_CurrentFrames. Patch by Kumar Aditya.
  - Fix AttributeError missing name and obj attributes in
    object.__getattribute__(). Patch by Philip Georgi.
  - Loading a file with invalid UTF-8 will now report the broken
    character at the correct location.
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes. Patch by Pablo Galindo
  - Fix a deadlock in PyGILState_Ensure() when allocating new
    thread state. Patch by Kumar Aditya.
  - PyType_Ready() now initializes ht_cached_keys and performs
    additional checks to ensure that type objects are properly
    configured. This avoids crashes in 3rd party packages that
    don’t use regular API to create new types.
  - Skip over incomplete frames in PyThreadState_GetFrame().
  - Fix format string in _PyPegen_raise_error_known_location that
    can lead to memory corruption on some 64bit systems. The
    function was building a tuple with i (int) instead of n
    (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - Fix incorrect error message in the io module.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL. Patch by Victor Stinner.
  - Correct conversion of numbers.Rational’s to float.
  - Fix TypeVarTuple.__typing_prepare_subst__. TypeError was not
    raised when using more than one TypeVarTuple, like [*T, *V]
    in type alias substitutions.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Fix incorrect condition that causes sys.thread_info.name to
    be wrong on pthread platforms.
  - Remove an incompatible change from bpo-28080 that caused a
    regression that ignored the utf8 in ZipInfo.flag_bits. Patch
    by Pablo Galindo.
  - Fix asyncio.Runner to call asyncio.set_event_loop() only
    once to avoid calling attach_loop() multiple times on child
    watchers. Patch by Kumar Aditya.
  - Fix unittest.IsolatedAsyncioTestCase to set event loop before
    calling setup functions. Patch by Kumar Aditya.
  - When a task catches asyncio.CancelledError and raises some
    other error, the other error should generally not silently be
    suppressed.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on a
    Linux kernel with FIPS enabled.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks. Patch by Kumar Aditya.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from the
    lower level threading and multiprocessing modules.
  - What’s New 3.11 now has instructions for how to provide
    compiler and linker flags for Tcl/Tk and OpenSSL on RHEL 7
    and CentOS 7.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing. Patch by Ross Burton.
  - Build and test with OpenSSL 1.1.1q
- Use support-expat-CVE-2022-25236-patched.patch from the current
  version of gh#python/cpython#93900 instead of the old
  support-expat-245.patch.
- Reapply fix_configure_rst.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1666699200">- Update to 3.11.0 (overall changes from 3.10.*):
  - General changes
  - PEP 657 -- Include Fine-Grained Error Locations in
    Tracebacks
  - PEP 654 -- Exception Groups and except*
  - PEP 680 -- tomllib: Support for Parsing TOML in the
    Standard Library
  - gh-90908 -- Introduce task groups to asyncio
  - gh-34627 -- Atomic grouping ((?&gt;...)) and possessive
    quantifiers (*+, ++, ?+, {m,n}+) are now supported in
    regular expressions.
  - The Faster CPython Project is already yielding some
    exciting results. Python 3.11 is up to 10-60% faster than
    Python 3.10. On average, we measured a 1.22x speedup on the
    standard benchmark suite. See Faster CPython for details.
  - Typing and typing language changes
  - PEP 673 -- Self Type
  - PEP 646 -- Variadic Generics
  - PEP 675 -- Arbitrary Literal String Type
  - PEP 655 -- Marking individual TypedDict items as required
    or potentially-missing
  - PEP 681 -- Data Class Transforms
- (just changes from 3.11.0rc2):
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size. Issue reported by Jordan Limor. Patch by
    Victor Stinner.
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication
    with the forkserver process instead of the Linux abstract
    socket namespace. Only code that chooses to use the
    “forkserver” start method is affected. Abstract sockets have
    no permissions and could allow any user on the system in the
    same network namespace (often the whole system) to inject
    code into the multiprocessing forkserver process. This was
    a potential privilege escalation. Filesystem based socket
    permissions restrict this to the forkserver process user as
    was the default in Python 3.8 and earlier. This prevents
    Linux CVE-2022-42919.
  - Fix an issue where several frame objects could be backed by
    the same interpreter frame, possibly leading to corrupted
    memory and hard crashes of the interpreter.
  - Fix possible data corruption or crashes when accessing the
    f_back member of newly-created generator or coroutine frames.
  - Fix a crash occurring when PyEval_GetFrame() is called while
    the topmost Python frame is in a partially-initialized state.
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit. Patch by Victor
    Stinner.
  - Fix undefined behaviour in _testcapimodule.c.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message. Patch by Victor Stinner.
  - Correctly raise SyntaxError on exception groups (PEP 654) on
    python versions prior to 3.11
  - Document some places where an assignment expression needs
    parentheses.
  - Update the bundled copies of pip and setuptools to versions
    22.3 and 65.5.0 respectively.
  - fix Flag to use boundary CONFORM
  - This restores previous Flag behavior of allowing flags with
    non-sequential values to be combined; e.g.
  - class Skip(Flag): TWO = 2 EIGHT = 8
  - Skip.TWO | Skip.EIGHT -&gt; &lt;Skip.TWO|EIGHT: 10&gt;
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.11.1:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed
    to the stderr server lo This is done by changing the
    http.server BaseHTTPRequestHandler .log_message method to
    replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2022-45061).
  - Update bundled libexpat to 2.5.0
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. Issue reported
    and initial fix by Caleb Shortt. Patch by Victor Stinner.
  - Fix a crash when an object which does not have a dictionary
    frees its instance values.
  - Fix a bug in the tokenizer that could cause infinite
    recursion when showing syntax warnings that happen in the
    first line of the source. Patch by Pablo Galindo
  - Fix an issue that could cause frames to be visible to Python
    code as they are being torn down, possibly leading to memory
    corruption or hard crashes of the interpreter.
  - Fix a reference bug in _imp.create_builtin() after the
    creation of the first sub-interpreter for modules builtins
    and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if the
    tokenizer copies a line missing the newline caracter from a
    file that is as long as the available tokenizer buffer. Patch
    by Pablo galindo
  - Fix bug where an ExceptionGroup subclass can wrap a
    BaseException.
  - Fix zip path for venv created from a non-installed python on
    POSIX platforms.
  - Fix an issue that could potentially cause incorrect error
    handling for some bytecode instructions.
  - Fix an issue that prevented PyThreadState and
    PyInterpreterState memory from being freed properly.
  - Fix failure in except* with unhashable exceptions.
  - Fix calculation of sys._base_executable when inside a POSIX
    virtual environment using copies of the python binary when
    the base installation does not provide the executable name
    used by the venv. Calculation will fall back to alternative
    names (“python&lt;MAJOR&gt;”, “python&lt;MAJOR&gt;.&lt;MINOR&gt;”).
  - Update faulthandler to emit an error message with the proper
    unexpected signal number. Patch by Dong-hee Na.
  - Fix location of SyntaxError for a try block with both except
    and except*.
  - Fix the error reporting positions of specialized traceback
    anchors when the source line contains Unicode characters.
  - Fix subscription of type aliases containing bare generic
    types or types like TypeVar: for example tuple[A, T][int] and
    tuple[TypeVar, T][int], where A is a generic type, and T is a
    type variable.
  - Lower the recursion depth for marshal on WASI to support
    wasmtime 2.0/main.
  - Fix multiple crashes in debug mode when str subclasses are
    used instead of str itself.
  - Fix an issue where member descriptors (such as those for
    __slots__) could behave incorrectly or crash instead of
    raising a TypeError when accessed via an instance of an
    invalid type.
  - Suppress ImportError for invalid query for help()
    command. Patch by Dong-hee Na.
  - Fix detection of MAC addresses for uuid on certain OSs. Patch
    by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - os.sched_yield() now release the GIL while calling
    sched_yield(2). Patch by Dong-hee Na.
  - Fix an issue that could delay the specialization of PRECALL
    instructions.
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Ensure that all Python frame objects are backed by “complete”
    frames.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__(). Patch by Ofey Chan.
  - Fix the Python path configuration used to initialized
    sys.path at Python startup. Paths are no longer encoded
    to UTF-8/strict to avoid encoding errors if it contains
    surrogate characters (bytes paths are decoded with the
    surrogateescape error handler). Patch by Victor Stinner.
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting. Issue
    discovered and analyzed by Mingliang ZHAO. Patch by Victor
    Stinner.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Make sure that all frame objects created are created from
    valid interpreter frames. Prevents the possibility of invalid
    frames in backtraces and signal handlers.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - On WASI ENOTCAPABLE is now mapped to PermissionError. The
    errno modules exposes the new error number. getpath.py now
    ignores PermissionError when it cannot open landmark files
    pybuilddir.txt and pyenv.cfg.
  - Allow pdb to locate source for frozen modules in the standard
    library.
  - Raise ValueError instead of SystemError when methods of
    uninitialized io.IncrementalNewlineDecoder objects are
    called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when the opener
    returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a deprecation warning
    when a new event loop was created implicitly. It no longer
    emits a deprecation warning if the current event loop was
    set.
  - Fix bug when calling trace.CoverageResults with valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid blocking
    threads.
  - Fix ast.increment_lineno() to also cover ast.TypeIgnore when
    changing line numbers.
  - Fix bug in urllib.parse.urlparse() that causes URL schemes
    that begin with a digit, a plus sign, or a minus sign to be
    parsed incorrectly.
  - Check the number of arguments in substitution in user
    generics containing a TypeVarTuple and one or more TypeVar.
  - Fix substitution of ParamSpec followed by TypeVarTuple in
    generic aliases.
  - Fix substitution of TypeVarTuple and ParamSpec together in
    user generics.
  - Fixed bug where inspect.signature() reported incorrect
    arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not set during
    __initsubclass__.
  - Remove older version of
    _SSLProtocolTransport.get_write_buffer_limits in
    asyncio.sslproto
  - fix negative numbers failing in verify()
  - Fix statistics.NormalDist pickle with 0 and 1 protocols.
  - enum.auto() is now correctly activated when combined with
    other assignment values. E.g. ONE = auto(), 'some text' will
    now evaluate as (1, 'some text').
  - Update the bundled copy of pip to version 22.3.1.
  - Clean up refleak on failed module initialisation in _zoneinfo
  - Clean up refleaks on failed module initialisation in in
    _pickle
  - Clean up refleak on failed module initialisation in _io.
  - Fix memory leak in math.dist() when both points don’t have
    the same dimension. Patch by Kumar Aditya.
  - [3.11] Applied changes from importlib_metadata 4.11.4
    through 4.13, including compatibility and robustness
    fixes for Distribution objects without _normalized_name,
    disallowing invalid inputs to Distribution.from_name, and
    refined behaviors in PathDistribution._name_from_stem and
    PathDistribution._normalized_name.
  - Fix argument typechecks in _overlapped.WSAConnect() and
    _overlapped.Overlapped.WSASendTo() functions.
  - Prevent crashing in traceback when retrieving the byte-offset
    for some source files that contain certain unicode
    characters.
  - Fix internal error in the re module which in very rare
    circumstances prevented compilation of a regular expression
    containing a conditional expression without the “else”
    branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to protect
    concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in asyncio
    with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a self-referencing chained
    exception is raised
  - tkinter.Text.count() raises now an exception for options
    starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields and
    _asdict would include all six properties including processor.
  - A createSocket() method was added to SysLogHandler.
  - Fix bug in urllib.parse.urlparse() that causes certain port
    numbers containing whitespace, underscores, plus and minus
    signs, or non-ASCII digits to be incorrectly accepted.
  - Allow venv to pass along PYTHON* variables to ensurepip and
    pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in multi-threaded
    applications. On macOS, the libc syslog() function is not
    thread-safe, so syslog.syslog() no longer releases the GIL to
    call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Make sure patch.dict() can be applied on async functions.
  - Earlier in 3.11 we deprecated
    asyncio.Task.cancel("message"). We realized we were too
    harsh, and have undeprecated it.
  - Change deprecate warning message in unittest from It is
    deprecated to return a value!=None to It is deprecated to
    return a value that is not None from a test case
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Fix is_private properties in the ipaddress module. Previously
    non-private networks (0.0.0.0/0) would return True from this
    method; now they correctly return False.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output. Patch by Kumar Aditya.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix repr of Any subclasses.
  - Work around missing socket functions in socket’s __repr__.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix handling of bytes path-like objects in os.ismount().
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - To avoid apparent memory leaks when asyncio.open_connection()
    raises, break reference cycles generated by local exception
    and future instances (which has exception instance as its
    member var). Patch by Dong Uk, Kang.
  - Fixed flickering of the turtle window when the tracer is
    turned off. Patch by Shin-myoung-serp.
  - Fix asyncio subprocess transport to kill process cleanly
    when process is blocked and avoid RuntimeError when loop is
    closed. Patch by Kumar Aditya.
  - Prevent error when activating venv in nested fish instances.
  - TarFile.next() now returns None when called on an empty
    tarfile.
  - Document the optional callback parameter of WeakMethod. Patch
    by Géry Ogam.
  - Restrict use of sockets instead of pipes for stdin of
    subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the ignore_dangling_symlinks
    argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a store_true
    action is given an explicit argument.
  - Document that calling variadic functions with ctypes requires
    special care on macOS/arm64 (and possibly other platforms).
  - Remove extra row
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Restructured the documentation for the os.wait* family of
    functions, and improved the docs for os.waitid() with more
    explanation of the possible argument constants.
  - Skip test_normalization() of test_unicodedata if it
    fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Correct test_marsh on (32 bit) x86: test_deterministic sets
    was failing.
  - Optional big memory tests in test_sqlite3 now catch the
    correct sqlite.DataError exception type in case of too large
    strings and/or blobs passed.
  - Fix a bug in the typing tests where a test relying
    on CPython-specific implementation details was not
    decorated with @cpython_only and was not skipped on other
    implementations.
  - Add tests for star-unpacking with PEP 646, and some other
    miscellaneous PEP 646 tests.
  - Added explicit coverage of Py_Initialize (and hence
    Py_InitializeEx) back to the embedding tests (all other
    embedding tests migrated to Py_InitializeFromConfig in Python
    3.11)
  - Some C API tests were moved into the new Lib/test/test_capi/
    directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix a compilation issue with GCC 12 on macOS.
  - Fix -Wimplicit-int compiler warning in configure check for
    PTHREAD_SCOPE_SYSTEM.
  - Fix a possible fd leak in Programs/_freeze_module.c
    introduced in Python 3.11.
  - Fix build with PYTHON_FOR_REGEN=python3.8.
  - Specify the full path to the source location for make
    docclean (needed for cross-builds).
  - Don’t use vendored libmpdec headers if --with-system-libmpdec
    is passed to configure. Don’t use vendored libexpat headers
    if --with-system-expat is passed to !configure.
  - Fix the build process of clang compiler for _bootstrap_python
    if LTO optimization is applied. Patch by Matthias Görgens and
    Dong-hee Na.
  - wasm32-emscripten builds for browsers now include
    concurrent.futures for asyncio and unittest.mock.
  - wasm32-emscripten platform no longer builds resource module,
    getresuid(), getresgid(), and their setters. The APIs are
    stubs and not functional.
  - Updated pegen regeneration script on Windows to find and
    use Python 3.9 or higher. Prior to this, pegen regeneration
    already required 3.9 or higher, but the script may have used
    lower versions of Python.
  - Fix a bug in the previous bugfix that caused IDLE to
    not start when run with 3.10.8, 3.12.0a1, and at least
    Microsoft Python 3.10.2288.0 installed without the Lib/test
    package. 3.11.0 was never affected.
  - The wasm_build.py script now pre-builds Emscripten ports,
    checks for broken EMSDK versions, and warns about pkg-config
    env vars.
  - The new tool Tools/wasm/wasm_builder.py automates configure,
    compile, and test steps for building CPython on WebAssembly
    platforms.
  - Fix handling of module docstrings in Tools/i18n/pygettext.py.
  - PyBUF_* constants were marked as part of Limited API
    of Python 3.11+. These were available in 3.11.0 with
    Py_LIMITED_API defined for 3.11, and are necessary to use the
    buffer API.
  - Fix use-after-free in Py_SetPythonHome(NULL),
    Py_SetProgramName(NULL) and _Py_SetProgramFullPath(NULL)
    function calls. Issue reported by Benedikt Reinartz. Patch by
    Victor Stinner.
  - Py_InitializeEx now correctly calls PyConfig_Clear after
    initializing the interpreter (the omission didn’t cause a
    memory leak only because none of the dynamically allocated
    config fields are populated by the wrapper function)
- Removed upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mcepl@suse.com" date="1673352000">- Don't fail on Sphinx build warnings.
- For jsc#PED-1570, jsc#PED-2217 and jsc#PED-68,
  providing Python 3.11 for SLE-15-SP4.</changelog>
  <changelog author="dmueller@suse.com" date="1674561600">- build GLIBC hwcaps optimized versions of the interpreter</changelog>
  <changelog author="kukuk@suse.com" date="1674734400">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add python310 Obsoletes line to obsolete_python_versioned macro.</changelog>
  <changelog author="mcepl@suse.com" date="1677844800">- Update to 3.11.2:
  Bug fixes, no changes in API and no security bugs.</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.11.3:
  - Security
  - gh-101727: Updated the OpenSSL version used in Windows
    and macOS binary release builds to 1.1.1t to address
    CVE-2023-0286, CVE-2022-4303, and CVE-2022-4303 per the
    OpenSSL 2023-02-07 security advisory.
  - Core and Builtins
  - gh-101975: Fixed stacktop value on tracing entries to avoid
    corruption on garbage collection.
  - gh-102701: Fix overflow when creating very large dict.
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102281: Fix potential nullptr dereference and use of
    uninitialized memory in fileutils. Patch by Max Bachmann.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - gh-101696: Invalidate type version tag in
    _PyStaticType_Dealloc for static types, avoiding bug where
    a false cache hit could crash the interpreter. Patch by
    Kumar Aditya.
  - Library
  - gh-102549: Don’t ignore exceptions in member type creation.
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-102780: The asyncio.Timeout context manager now
    works reliably even when performing cleanup due to task
    cancellation. Previously it could raise a CancelledError
    instead of an TimeoutError in such cases.
  - gh-88965: typing: Fix a bug relating to substitution in   .
    Pacustom classes generic over a ParamSpec. Previously, if   .
    Pathe ParamSpec was substituted with a parameters list that .
    Paitself contained a TypeVar, the TypeVar in the parameters .
    Palist could not be subsequently substituted. This is now   .
    Pafixed tch by Nikita Sobolev                               .
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-102069: Fix __weakref__ descriptor generation for custom
    dataclasses.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-96127: inspect.signature was raising TypeError on
    call with mock objects. Now it correctly returns (*args,
  * *kwargs) as infered signature.
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-89792: test_tools now copies up to 10x less source data
    to a temporary directory during the freeze test by ignoring
    git metadata and other artifacts. It also limits its python
    build parallelism based on os.cpu_count instead of hard
    coding it as 8 cores.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1682856000">- Add 103213-fetch-CONFIG_ARGS.patch (gh#python/cpython#103053).
- Add skip_if_buildbot-extend.patch to avoid the bug altogether
  (extending what skip_if_buildbot covers).
- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  bsc#1203750 (CVE-2007-4559) and implementing "PEP 706 – Filter
  for tarfile.extractall".</changelog>
  <changelog author="mcepl@suse.com" date="1687780800">- Remove obsolete_python_versioned macro again. This mechanism
  has no business to be in Python 3.11, because we have abolished
  with it whole interpreter+setuptools+pip product. Python 3.11
  should not be replaced by later versions anymore.</changelog>
</package>
<package pkgid="5164c151b5de2232be31aa9d6c78f4b7bcbdb9d5899bfef7e102edad4e7aff59" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="4436fcf74ca826459fd7e8b06f028f356426a4e251ef576359fef1cf09c8ccca" name="libpython3_6m1_0" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="dcda3addd227f44a75c633b169a69b5f45957c2b570efbb6e9ea9a571eb712ff" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="bff1a5797066d946f9090f57299b621ba660557d43b9c2a0c31f39d6df4dbf2d" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="defc1816600c945e91bb2b79f29161cc20f1b40b7734fc7e6eb0f0dbba0ff3f3" name="libpython3_6m1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="3711a37863e2861fadb1ab74aa56d464e492711c6f163c6caef5236c78f8ba5e" name="libpython3_9-1_0" arch="aarch64">
  <version epoch="0" ver="3.9.16" rel="150300.4.27.1"/>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1648296000">- Update to 3.9.12:
  - bpo-46968: Check for the existence of the “sys/auxv.h” header
    in faulthandler to avoid compilation problems in systems
    where this header doesn’t exist. Patch by Pablo Galindo
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers on
    OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-23691: Protect the re.finditer() iterator from
    re-entering.
  - bpo-42369: Fix thread safety of zipfile._SharedFile.tell() to
    avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception
    when reading a ZipFile from multiple threads.
  - bpo-38256: Fix binascii.crc32() when it is compiled to use
    zlib’c crc32 to work properly on inputs 4+GiB in length
    instead of returning the wrong result. The workaround prior
    to this was to always feed the function data in increments
    smaller than 4GiB or to just call the zlib module function.
  - bpo-39394: A warning about inline flags not at the start of
    the regular expression now contains the position of the flag.
  - bpo-47061: Deprecate the various modules listed by PEP 594:
  - aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt,
    imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd,
    sndhdr, spwd, sunau, telnetlib, uu, xdrlib
  - bpo-2604: Fix bug where doctests using globals would fail
    when run multiple times.
  - bpo-45997: Fix asyncio.Semaphore re-aquiring FIFO order.
  - bpo-47022: The asynchat, asyncore and smtpd modules have been
    deprecated since at least Python 3.6. Their documentation has
    now been updated to note they will removed in Python 3.12
    (PEP 594).
  - bpo-46421: Fix a unittest issue where if the command was
    invoked as python -m unittest and the filename(s) began with
    a dot (.), a ValueError is returned.
  - bpo-40296: Fix supporting generic aliases in pydoc.
  - bpo-14156: argparse.FileType now supports an argument of ‘-’
    in binary mode, returning the .buffer attribute of
    sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and
    ‘a’ are treated equivalently to ‘w’ when argument is ‘-’.
    Patch contributed by Josh Rosenberg
- Update to 3.9.11:
  - bpo-46852: Rename the private undocumented
    float.__set_format__() method to float.__setformat__() to fix
    a typo introduced in Python 3.7. The method is only used by
    test_float. Patch by Victor Stinner.
  - bpo-46794: Bump up the libexpat version into 2.4.6
  - bpo-46762: Fix an assert failure in debug builds when a ‘&lt;’,
    ‘&gt;’, or ‘=’ is the last character in an f-string that’s
    missing a closing right brace.
  - bpo-46732: Correct the docstring for the __bool__() method.
    Patch by Jelle Zijlstra.
  - bpo-40479: Add a missing call to va_end() in
    Modules/_hashopenssl.c.
  - bpo-46615: When iterating over sets internally in
    setobject.c, acquire strong references to the resulting items
    from the set. This prevents crashes in corner-cases of
    various set operations where the set gets mutated.
  - bpo-43721: Fix docstrings of getter, setter, and deleter to
    clarify that they create a new copy of the property.
  - bpo-46503: Fix an assert when parsing some invalid N escape
    sequences in f-strings.
  - bpo-46417: Fix a race condition on setting a type __bases__
    attribute: the internal function add_subclass() now gets the
    PyTypeObject.tp_subclasses member after calling
    PyWeakref_NewRef() which can trigger a garbage collection
    which can indirectly modify PyTypeObject.tp_subclasses. Patch
    by Victor Stinner.
  - bpo-46383: Fix invalid signature of _zoneinfo’s module_free
    function to resolve a crash on wasm32-emscripten platform.
  - bpo-43253: Fix a crash when closing transports where the
    underlying socket handle is already invalid on the Proactor
    event loop.
  - bpo-47004: Apply bugfixes from importlib_metadata 4.11.3,
    including bugfix for EntryPoint.extras, which was returning
    match objects and not the extras strings.
  - bpo-46985: Upgrade pip wheel bundled with ensurepip (pip
    22.0.4, bnc#1186819, CVE-2021-3572)
  - bpo-46968: faulthandler: On Linux 5.14 and newer, dynamically
    determine size of signal handler stack size CPython allocates
    using getauxval(AT_MINSIGSTKSZ). This changes allows for
    Python extension’s request to Linux kernel to use AMX_TILE
    instruction set on Sapphire Rapids Xeon processor to succeed,
    unblocking use of the ISA in frameworks.
  - bpo-46955: Expose asyncio.base_events.Server as
    asyncio.Server. Patch by Stefan Zabka.
  - bpo-46932: Update bundled libexpat to 2.4.7
  - bpo-25707: Fixed a file leak in
    xml.etree.ElementTree.iterparse() when the iterator is not
    exhausted. Patch by Jacob Walls.
  - bpo-44886: Inherit asyncio proactor datagram transport from
    asyncio.DatagramTransport.
  - bpo-46827: Support UDP sockets in asyncio.loop.sock_connect()
    for selector-based event loops. Patch by Thomas Grainger.
  - bpo-46811: Make test suite support Expat &gt;=2.4.5
  - bpo-46252: Raise TypeError if ssl.SSLSocket is passed to
    transport-based APIs.
  - bpo-46784: Fix libexpat symbols collisions with user
    dynamically loaded or statically linked libexpat in embedded
    Python.
  - bpo-39327: shutil.rmtree() can now work with VirtualBox
    shared folders when running from the guest operating-system.
  - bpo-46756: Fix a bug in
    urllib.request.HTTPPasswordMgr.find_user_password() and
    urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated()
    which allowed to bypass authorization. For example, access to
    URI example.org/foobar was allowed if the user was authorized
    for URI example.org/foo.
  - bpo-45863: When the tarfile module creates a pax format
    archive, it will put an integer representation of timestamps
    in the ustar header (if possible) for the benefit of older
    unarchivers, in addition to the existing full-precision
    timestamps in the pax extended header.
  - bpo-46672: Fix NameError in asyncio.gather() when initial
    type check fails.
  - bpo-45948: Fixed a discrepancy in the C implementation of the
    xml.etree.ElementTree module. Now, instantiating an
    xml.etree.ElementTree.XMLParser with a target=None keyword
    provides a default xml.etree.ElementTree.TreeBuilder target
    as the Python implementation does.
  - bpo-46591: Make the IDLE doc URL on the About IDLE dialog
    clickable.
  - bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4
  - bpo-46487: Add the get_write_buffer_limits method to
    asyncio.transports.WriteTransport and to the SSL transport.
  - bpo-46539: In typing.get_type_hints(), support evaluating
    stringified ClassVar and Final annotations inside Annotated.
    Patch by Gregory Beauregard.
  - bpo-46491: Allow typing.Annotated to wrap typing.Final and
    typing.ClassVar. Patch by Gregory Beauregard.
  - bpo-46436: Fix command-line option -d/--directory in module
    http.server which is ignored when combined with command-line
    option --cgi. Patch by Géry Ogam.
  - bpo-41403: Make mock.patch() raise a TypeError with
    a relevant error message on invalid arg. Previously it
    allowed a cryptic AttributeError to escape.
  - bpo-46474: In importlib.metadata.EntryPoint.pattern, avoid
    potential REDoS by limiting ambiguity in consecutive
    whitespace.
  - bpo-46469: asyncio generic classes now return
    types.GenericAlias in __class_getitem__ instead of the same
    class.
  - bpo-46434: pdb now gracefully handles help when __doc__ is
    missing, for example when run with pregenerated optimized
    .pyc files.
  - bpo-46333: The __eq__() and __hash__() methods of
    typing.ForwardRef now honor the module parameter of
    typing.ForwardRef. Forward references from different modules
    are now differentiated.
  - bpo-43118: Fix a bug in inspect.signature() that was causing
    it to fail on some subclasses of classes with
    a __text_signature__ referencing module globals. Patch by
    Weipeng Hong.
  - bpo-21987: Fix an issue with tarfile.TarFile.getmember()
    getting a directory name with a trailing slash.
  - bpo-20392: Fix inconsistency with uppercase file extensions
    in MimeTypes.guess_type(). Patch by Kumar Aditya.
  - bpo-46080: Fix exception in argparse help text generation if
    a argparse.BooleanOptionalAction argument’s default is
    argparse.SUPPRESS and it has help specified. Patch by Felix
    Fontein.
  - bpo-44439: Fix .write() method of a member file in ZipFile,
    when the input data is an object that supports the buffer
    protocol, the file length may be wrong.
  - bpo-45703: When a namespace package is imported before
    another module from the same namespace is created/installed
    in a different sys.path location while the program is
    running, calling the importlib.invalidate_caches() function
    will now also guarantee the new module is noticed.
  - bpo-24959: Fix bug where unittest sometimes drops frames from
    tracebacks of exceptions raised in tests.
  - bpo-46463: Fixes escape4chm.py script used when building the
    CHM documentation file
  - bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is
    built with undefined behavior sanitizer (UBSAN): disable
    UBSAN on the faulthandler_sigfpe() function. Patch by Victor
    Stinner.
  - bpo-46708: Prevent default asyncio event loop policy
    modification warning after test_asyncio execution.
  - bpo-46616: Ensures test_importlib.test_windows cleans up
    registry keys after completion.
  - bpo-44359: test_ftplib now silently ignores socket errors to
    prevent logging unhandled threading exceptions. Patch by
    Victor Stinner.
  - bpo-46542: Fix a Python crash in test_lib2to3 when using
    Python built in debug mode: limit the recursion limit. Patch
    by Victor Stinner.
  - bpo-46576: test_peg_generator now disables compiler
    optimization when testing compilation of its own C extensions
    to significantly speed up the testing on non-debug builds of
    CPython.
  - bpo-46542: Fix test_json tests checking for RecursionError:
    modify these tests to use support.infinite_recursion(). Patch
    by Victor Stinner.
  - bpo-13886: Skip test_builtin PTY tests on non-ASCII
    characters if the readline module is loaded. The readline
    module changes input() behavior, but test_builtin is not
    intented to test the readline module. Patch by Victor
    Stinner.
  - bpo-38472: Fix GCC detection in setup.py when
    cross-compiling. The C compiler is now run with LC_ALL=C.
    Previously, the detection failed with a German locale.
  - bpo-46513: configure no longer uses AC_C_CHAR_UNSIGNED macro
    and pyconfig.h no longer defines reserved symbol
    __CHAR_UNSIGNED__.
  - bpo-45925: Update Windows installer to use SQLite 3.37.2.
  - bpo-45296: Clarify close, quit, and exit in IDLE. In the File
    menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current
    one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows).
    In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there
    are no other windows, this also exits IDLE.
  - bpo-45447: Apply IDLE syntax highlighting to pyi files. Patch
    by Alex Waygood and Terry Jan Reedy.
- Removed upstreamed patches:
  - support-expat-245.patch</changelog>
  <changelog author="mcepl@suse.com" date="1653048000">- Update to 3.9.13:
  - Core and Builtins
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-46775: Some Windows system error codes(&gt;= 10000) are
    now mapped into the correct errno and may now raise
    a subclass of OSError. Patch by Dong-hee Na.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are pickle.PickleBuffer,
    testcapi.RecursingInfinitelyError, and types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91734: Fix OSS audio support on Solaris.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-34480: Fix a bug where _markupbase raised an
    UnboundLocalError when an invalid keyword was found in
    marked section. Patch by Marek Suscak.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-44911: IsolatedAsyncioTestCase will no longer throw an
    exception while cancelling leaked tasks. Patch by Bar
    Harel.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 2.4.4.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Build
  - bpo-47103: Windows PGInstrument builds now copy a required
    DLL into the output directory, making it easier to run the
    profile stage of a PGO build.
  - Windows
  - bpo-47194: Update zlib to v1.2.12 to resolve
    CVE-2018-25032.
  - bpo-46785: Fix race condition between os.stat() and
    unlinking a file on Windows, by using errors codes returned
    by FindFirstFileW() when appropriate in win32_xstat_impl.
  - bpo-40859: Update Windows build to use xz-5.2.5
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.
- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.4 (jsc#SLE-21253)</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.
- (bsc#1196784, CVE-2022-25236) Rename patch:
  support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch
  and update the patch to detect expat &gt;= 2.4.4 instead of &gt;= 2.4.5
  as it was fully patched against CVE-2022-25236.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.9.14:
  - (CVE-2020-10735, bsc#1203125). Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises a
    ValueError if the number of digits in string form is above a
    limit to avoid potential denial of service attacks due to the
    algorithmic complexity.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Also other bug fixes:
  - http.server: Fix an open redirection vulnerability in the
    HTTP server when an URI path starts with //. Vulnerability
    discovered, and initial fix proposed, by Hamza Avvan.
  - Fix contextvars HAMT implementation to handle iteration
    over deep trees. The bug was discovered and fixed by Eli
    Libman. See MagicStack/immutables#84 for more details.
  - Fix binding of unix socket to empty address on Linux to use
    an available address from the abstract namespace, instead
    of “0”.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix the formatting for await x and not x in the operator
    precedence table when using the help() system.
  - Fix ensurepip environment isolation for subprocess running
    pip.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - test_ssl is now checking for supported TLS version and
    protocols in more tests.
- Removed upstreamed patches:
  - CVE-2021-28861-double-slash-path.patch
- Realign patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - sphinx-update-removed-function.patch</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.9.15:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - Update bundled libexpat to 2.4.9</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.9.16:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed to the
    stderr server log.
    This is done by changing the http.server
    BaseHTTPRequestHandler .log_message method to replace control
    characters with a \xHH hex escape before printing.
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2015-20107).
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication with
    the forkserver process instead of the Linux abstract socket
    namespace. Only code that chooses to use the “forkserver”
    start method is affected.
    Abstract sockets have no permissions and could allow any
    user on the system in the same network namespace (often
    the whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict this
    to the forkserver process user as was the default in Python
    3.8 and earlier.
    This prevents Linux CVE-2022-42919.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
- Removed upstreamed patches:
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mliska@suse.cz" date="1673611200">- Suppress warnings for Sphinx 6.0+.</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="f67e0854d764f4bf4d7fbd543c9b2949698f90ffd3eb5dbadff2fb4f2eb1842c" name="libpython3_9-1_0" arch="ppc64le">
  <version epoch="0" ver="3.9.16" rel="150300.4.27.1"/>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1648296000">- Update to 3.9.12:
  - bpo-46968: Check for the existence of the “sys/auxv.h” header
    in faulthandler to avoid compilation problems in systems
    where this header doesn’t exist. Patch by Pablo Galindo
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers on
    OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-23691: Protect the re.finditer() iterator from
    re-entering.
  - bpo-42369: Fix thread safety of zipfile._SharedFile.tell() to
    avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception
    when reading a ZipFile from multiple threads.
  - bpo-38256: Fix binascii.crc32() when it is compiled to use
    zlib’c crc32 to work properly on inputs 4+GiB in length
    instead of returning the wrong result. The workaround prior
    to this was to always feed the function data in increments
    smaller than 4GiB or to just call the zlib module function.
  - bpo-39394: A warning about inline flags not at the start of
    the regular expression now contains the position of the flag.
  - bpo-47061: Deprecate the various modules listed by PEP 594:
  - aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt,
    imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd,
    sndhdr, spwd, sunau, telnetlib, uu, xdrlib
  - bpo-2604: Fix bug where doctests using globals would fail
    when run multiple times.
  - bpo-45997: Fix asyncio.Semaphore re-aquiring FIFO order.
  - bpo-47022: The asynchat, asyncore and smtpd modules have been
    deprecated since at least Python 3.6. Their documentation has
    now been updated to note they will removed in Python 3.12
    (PEP 594).
  - bpo-46421: Fix a unittest issue where if the command was
    invoked as python -m unittest and the filename(s) began with
    a dot (.), a ValueError is returned.
  - bpo-40296: Fix supporting generic aliases in pydoc.
  - bpo-14156: argparse.FileType now supports an argument of ‘-’
    in binary mode, returning the .buffer attribute of
    sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and
    ‘a’ are treated equivalently to ‘w’ when argument is ‘-’.
    Patch contributed by Josh Rosenberg
- Update to 3.9.11:
  - bpo-46852: Rename the private undocumented
    float.__set_format__() method to float.__setformat__() to fix
    a typo introduced in Python 3.7. The method is only used by
    test_float. Patch by Victor Stinner.
  - bpo-46794: Bump up the libexpat version into 2.4.6
  - bpo-46762: Fix an assert failure in debug builds when a ‘&lt;’,
    ‘&gt;’, or ‘=’ is the last character in an f-string that’s
    missing a closing right brace.
  - bpo-46732: Correct the docstring for the __bool__() method.
    Patch by Jelle Zijlstra.
  - bpo-40479: Add a missing call to va_end() in
    Modules/_hashopenssl.c.
  - bpo-46615: When iterating over sets internally in
    setobject.c, acquire strong references to the resulting items
    from the set. This prevents crashes in corner-cases of
    various set operations where the set gets mutated.
  - bpo-43721: Fix docstrings of getter, setter, and deleter to
    clarify that they create a new copy of the property.
  - bpo-46503: Fix an assert when parsing some invalid N escape
    sequences in f-strings.
  - bpo-46417: Fix a race condition on setting a type __bases__
    attribute: the internal function add_subclass() now gets the
    PyTypeObject.tp_subclasses member after calling
    PyWeakref_NewRef() which can trigger a garbage collection
    which can indirectly modify PyTypeObject.tp_subclasses. Patch
    by Victor Stinner.
  - bpo-46383: Fix invalid signature of _zoneinfo’s module_free
    function to resolve a crash on wasm32-emscripten platform.
  - bpo-43253: Fix a crash when closing transports where the
    underlying socket handle is already invalid on the Proactor
    event loop.
  - bpo-47004: Apply bugfixes from importlib_metadata 4.11.3,
    including bugfix for EntryPoint.extras, which was returning
    match objects and not the extras strings.
  - bpo-46985: Upgrade pip wheel bundled with ensurepip (pip
    22.0.4, bnc#1186819, CVE-2021-3572)
  - bpo-46968: faulthandler: On Linux 5.14 and newer, dynamically
    determine size of signal handler stack size CPython allocates
    using getauxval(AT_MINSIGSTKSZ). This changes allows for
    Python extension’s request to Linux kernel to use AMX_TILE
    instruction set on Sapphire Rapids Xeon processor to succeed,
    unblocking use of the ISA in frameworks.
  - bpo-46955: Expose asyncio.base_events.Server as
    asyncio.Server. Patch by Stefan Zabka.
  - bpo-46932: Update bundled libexpat to 2.4.7
  - bpo-25707: Fixed a file leak in
    xml.etree.ElementTree.iterparse() when the iterator is not
    exhausted. Patch by Jacob Walls.
  - bpo-44886: Inherit asyncio proactor datagram transport from
    asyncio.DatagramTransport.
  - bpo-46827: Support UDP sockets in asyncio.loop.sock_connect()
    for selector-based event loops. Patch by Thomas Grainger.
  - bpo-46811: Make test suite support Expat &gt;=2.4.5
  - bpo-46252: Raise TypeError if ssl.SSLSocket is passed to
    transport-based APIs.
  - bpo-46784: Fix libexpat symbols collisions with user
    dynamically loaded or statically linked libexpat in embedded
    Python.
  - bpo-39327: shutil.rmtree() can now work with VirtualBox
    shared folders when running from the guest operating-system.
  - bpo-46756: Fix a bug in
    urllib.request.HTTPPasswordMgr.find_user_password() and
    urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated()
    which allowed to bypass authorization. For example, access to
    URI example.org/foobar was allowed if the user was authorized
    for URI example.org/foo.
  - bpo-45863: When the tarfile module creates a pax format
    archive, it will put an integer representation of timestamps
    in the ustar header (if possible) for the benefit of older
    unarchivers, in addition to the existing full-precision
    timestamps in the pax extended header.
  - bpo-46672: Fix NameError in asyncio.gather() when initial
    type check fails.
  - bpo-45948: Fixed a discrepancy in the C implementation of the
    xml.etree.ElementTree module. Now, instantiating an
    xml.etree.ElementTree.XMLParser with a target=None keyword
    provides a default xml.etree.ElementTree.TreeBuilder target
    as the Python implementation does.
  - bpo-46591: Make the IDLE doc URL on the About IDLE dialog
    clickable.
  - bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4
  - bpo-46487: Add the get_write_buffer_limits method to
    asyncio.transports.WriteTransport and to the SSL transport.
  - bpo-46539: In typing.get_type_hints(), support evaluating
    stringified ClassVar and Final annotations inside Annotated.
    Patch by Gregory Beauregard.
  - bpo-46491: Allow typing.Annotated to wrap typing.Final and
    typing.ClassVar. Patch by Gregory Beauregard.
  - bpo-46436: Fix command-line option -d/--directory in module
    http.server which is ignored when combined with command-line
    option --cgi. Patch by Géry Ogam.
  - bpo-41403: Make mock.patch() raise a TypeError with
    a relevant error message on invalid arg. Previously it
    allowed a cryptic AttributeError to escape.
  - bpo-46474: In importlib.metadata.EntryPoint.pattern, avoid
    potential REDoS by limiting ambiguity in consecutive
    whitespace.
  - bpo-46469: asyncio generic classes now return
    types.GenericAlias in __class_getitem__ instead of the same
    class.
  - bpo-46434: pdb now gracefully handles help when __doc__ is
    missing, for example when run with pregenerated optimized
    .pyc files.
  - bpo-46333: The __eq__() and __hash__() methods of
    typing.ForwardRef now honor the module parameter of
    typing.ForwardRef. Forward references from different modules
    are now differentiated.
  - bpo-43118: Fix a bug in inspect.signature() that was causing
    it to fail on some subclasses of classes with
    a __text_signature__ referencing module globals. Patch by
    Weipeng Hong.
  - bpo-21987: Fix an issue with tarfile.TarFile.getmember()
    getting a directory name with a trailing slash.
  - bpo-20392: Fix inconsistency with uppercase file extensions
    in MimeTypes.guess_type(). Patch by Kumar Aditya.
  - bpo-46080: Fix exception in argparse help text generation if
    a argparse.BooleanOptionalAction argument’s default is
    argparse.SUPPRESS and it has help specified. Patch by Felix
    Fontein.
  - bpo-44439: Fix .write() method of a member file in ZipFile,
    when the input data is an object that supports the buffer
    protocol, the file length may be wrong.
  - bpo-45703: When a namespace package is imported before
    another module from the same namespace is created/installed
    in a different sys.path location while the program is
    running, calling the importlib.invalidate_caches() function
    will now also guarantee the new module is noticed.
  - bpo-24959: Fix bug where unittest sometimes drops frames from
    tracebacks of exceptions raised in tests.
  - bpo-46463: Fixes escape4chm.py script used when building the
    CHM documentation file
  - bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is
    built with undefined behavior sanitizer (UBSAN): disable
    UBSAN on the faulthandler_sigfpe() function. Patch by Victor
    Stinner.
  - bpo-46708: Prevent default asyncio event loop policy
    modification warning after test_asyncio execution.
  - bpo-46616: Ensures test_importlib.test_windows cleans up
    registry keys after completion.
  - bpo-44359: test_ftplib now silently ignores socket errors to
    prevent logging unhandled threading exceptions. Patch by
    Victor Stinner.
  - bpo-46542: Fix a Python crash in test_lib2to3 when using
    Python built in debug mode: limit the recursion limit. Patch
    by Victor Stinner.
  - bpo-46576: test_peg_generator now disables compiler
    optimization when testing compilation of its own C extensions
    to significantly speed up the testing on non-debug builds of
    CPython.
  - bpo-46542: Fix test_json tests checking for RecursionError:
    modify these tests to use support.infinite_recursion(). Patch
    by Victor Stinner.
  - bpo-13886: Skip test_builtin PTY tests on non-ASCII
    characters if the readline module is loaded. The readline
    module changes input() behavior, but test_builtin is not
    intented to test the readline module. Patch by Victor
    Stinner.
  - bpo-38472: Fix GCC detection in setup.py when
    cross-compiling. The C compiler is now run with LC_ALL=C.
    Previously, the detection failed with a German locale.
  - bpo-46513: configure no longer uses AC_C_CHAR_UNSIGNED macro
    and pyconfig.h no longer defines reserved symbol
    __CHAR_UNSIGNED__.
  - bpo-45925: Update Windows installer to use SQLite 3.37.2.
  - bpo-45296: Clarify close, quit, and exit in IDLE. In the File
    menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current
    one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows).
    In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there
    are no other windows, this also exits IDLE.
  - bpo-45447: Apply IDLE syntax highlighting to pyi files. Patch
    by Alex Waygood and Terry Jan Reedy.
- Removed upstreamed patches:
  - support-expat-245.patch</changelog>
  <changelog author="mcepl@suse.com" date="1653048000">- Update to 3.9.13:
  - Core and Builtins
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-46775: Some Windows system error codes(&gt;= 10000) are
    now mapped into the correct errno and may now raise
    a subclass of OSError. Patch by Dong-hee Na.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are pickle.PickleBuffer,
    testcapi.RecursingInfinitelyError, and types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91734: Fix OSS audio support on Solaris.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-34480: Fix a bug where _markupbase raised an
    UnboundLocalError when an invalid keyword was found in
    marked section. Patch by Marek Suscak.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-44911: IsolatedAsyncioTestCase will no longer throw an
    exception while cancelling leaked tasks. Patch by Bar
    Harel.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 2.4.4.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Build
  - bpo-47103: Windows PGInstrument builds now copy a required
    DLL into the output directory, making it easier to run the
    profile stage of a PGO build.
  - Windows
  - bpo-47194: Update zlib to v1.2.12 to resolve
    CVE-2018-25032.
  - bpo-46785: Fix race condition between os.stat() and
    unlinking a file on Windows, by using errors codes returned
    by FindFirstFileW() when appropriate in win32_xstat_impl.
  - bpo-40859: Update Windows build to use xz-5.2.5
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.
- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.4 (jsc#SLE-21253)</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.
- (bsc#1196784, CVE-2022-25236) Rename patch:
  support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch
  and update the patch to detect expat &gt;= 2.4.4 instead of &gt;= 2.4.5
  as it was fully patched against CVE-2022-25236.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.9.14:
  - (CVE-2020-10735, bsc#1203125). Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises a
    ValueError if the number of digits in string form is above a
    limit to avoid potential denial of service attacks due to the
    algorithmic complexity.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Also other bug fixes:
  - http.server: Fix an open redirection vulnerability in the
    HTTP server when an URI path starts with //. Vulnerability
    discovered, and initial fix proposed, by Hamza Avvan.
  - Fix contextvars HAMT implementation to handle iteration
    over deep trees. The bug was discovered and fixed by Eli
    Libman. See MagicStack/immutables#84 for more details.
  - Fix binding of unix socket to empty address on Linux to use
    an available address from the abstract namespace, instead
    of “0”.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix the formatting for await x and not x in the operator
    precedence table when using the help() system.
  - Fix ensurepip environment isolation for subprocess running
    pip.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - test_ssl is now checking for supported TLS version and
    protocols in more tests.
- Removed upstreamed patches:
  - CVE-2021-28861-double-slash-path.patch
- Realign patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - sphinx-update-removed-function.patch</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.9.15:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - Update bundled libexpat to 2.4.9</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.9.16:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed to the
    stderr server log.
    This is done by changing the http.server
    BaseHTTPRequestHandler .log_message method to replace control
    characters with a \xHH hex escape before printing.
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2015-20107).
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication with
    the forkserver process instead of the Linux abstract socket
    namespace. Only code that chooses to use the “forkserver”
    start method is affected.
    Abstract sockets have no permissions and could allow any
    user on the system in the same network namespace (often
    the whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict this
    to the forkserver process user as was the default in Python
    3.8 and earlier.
    This prevents Linux CVE-2022-42919.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
- Removed upstreamed patches:
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mliska@suse.cz" date="1673611200">- Suppress warnings for Sphinx 6.0+.</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="a0d7b28a09029f89175ed788d4f4d6a74583730b16fc459a700dc91537f8e943" name="libpython3_9-1_0" arch="s390x">
  <version epoch="0" ver="3.9.16" rel="150300.4.27.1"/>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1648296000">- Update to 3.9.12:
  - bpo-46968: Check for the existence of the “sys/auxv.h” header
    in faulthandler to avoid compilation problems in systems
    where this header doesn’t exist. Patch by Pablo Galindo
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers on
    OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-23691: Protect the re.finditer() iterator from
    re-entering.
  - bpo-42369: Fix thread safety of zipfile._SharedFile.tell() to
    avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception
    when reading a ZipFile from multiple threads.
  - bpo-38256: Fix binascii.crc32() when it is compiled to use
    zlib’c crc32 to work properly on inputs 4+GiB in length
    instead of returning the wrong result. The workaround prior
    to this was to always feed the function data in increments
    smaller than 4GiB or to just call the zlib module function.
  - bpo-39394: A warning about inline flags not at the start of
    the regular expression now contains the position of the flag.
  - bpo-47061: Deprecate the various modules listed by PEP 594:
  - aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt,
    imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd,
    sndhdr, spwd, sunau, telnetlib, uu, xdrlib
  - bpo-2604: Fix bug where doctests using globals would fail
    when run multiple times.
  - bpo-45997: Fix asyncio.Semaphore re-aquiring FIFO order.
  - bpo-47022: The asynchat, asyncore and smtpd modules have been
    deprecated since at least Python 3.6. Their documentation has
    now been updated to note they will removed in Python 3.12
    (PEP 594).
  - bpo-46421: Fix a unittest issue where if the command was
    invoked as python -m unittest and the filename(s) began with
    a dot (.), a ValueError is returned.
  - bpo-40296: Fix supporting generic aliases in pydoc.
  - bpo-14156: argparse.FileType now supports an argument of ‘-’
    in binary mode, returning the .buffer attribute of
    sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and
    ‘a’ are treated equivalently to ‘w’ when argument is ‘-’.
    Patch contributed by Josh Rosenberg
- Update to 3.9.11:
  - bpo-46852: Rename the private undocumented
    float.__set_format__() method to float.__setformat__() to fix
    a typo introduced in Python 3.7. The method is only used by
    test_float. Patch by Victor Stinner.
  - bpo-46794: Bump up the libexpat version into 2.4.6
  - bpo-46762: Fix an assert failure in debug builds when a ‘&lt;’,
    ‘&gt;’, or ‘=’ is the last character in an f-string that’s
    missing a closing right brace.
  - bpo-46732: Correct the docstring for the __bool__() method.
    Patch by Jelle Zijlstra.
  - bpo-40479: Add a missing call to va_end() in
    Modules/_hashopenssl.c.
  - bpo-46615: When iterating over sets internally in
    setobject.c, acquire strong references to the resulting items
    from the set. This prevents crashes in corner-cases of
    various set operations where the set gets mutated.
  - bpo-43721: Fix docstrings of getter, setter, and deleter to
    clarify that they create a new copy of the property.
  - bpo-46503: Fix an assert when parsing some invalid N escape
    sequences in f-strings.
  - bpo-46417: Fix a race condition on setting a type __bases__
    attribute: the internal function add_subclass() now gets the
    PyTypeObject.tp_subclasses member after calling
    PyWeakref_NewRef() which can trigger a garbage collection
    which can indirectly modify PyTypeObject.tp_subclasses. Patch
    by Victor Stinner.
  - bpo-46383: Fix invalid signature of _zoneinfo’s module_free
    function to resolve a crash on wasm32-emscripten platform.
  - bpo-43253: Fix a crash when closing transports where the
    underlying socket handle is already invalid on the Proactor
    event loop.
  - bpo-47004: Apply bugfixes from importlib_metadata 4.11.3,
    including bugfix for EntryPoint.extras, which was returning
    match objects and not the extras strings.
  - bpo-46985: Upgrade pip wheel bundled with ensurepip (pip
    22.0.4, bnc#1186819, CVE-2021-3572)
  - bpo-46968: faulthandler: On Linux 5.14 and newer, dynamically
    determine size of signal handler stack size CPython allocates
    using getauxval(AT_MINSIGSTKSZ). This changes allows for
    Python extension’s request to Linux kernel to use AMX_TILE
    instruction set on Sapphire Rapids Xeon processor to succeed,
    unblocking use of the ISA in frameworks.
  - bpo-46955: Expose asyncio.base_events.Server as
    asyncio.Server. Patch by Stefan Zabka.
  - bpo-46932: Update bundled libexpat to 2.4.7
  - bpo-25707: Fixed a file leak in
    xml.etree.ElementTree.iterparse() when the iterator is not
    exhausted. Patch by Jacob Walls.
  - bpo-44886: Inherit asyncio proactor datagram transport from
    asyncio.DatagramTransport.
  - bpo-46827: Support UDP sockets in asyncio.loop.sock_connect()
    for selector-based event loops. Patch by Thomas Grainger.
  - bpo-46811: Make test suite support Expat &gt;=2.4.5
  - bpo-46252: Raise TypeError if ssl.SSLSocket is passed to
    transport-based APIs.
  - bpo-46784: Fix libexpat symbols collisions with user
    dynamically loaded or statically linked libexpat in embedded
    Python.
  - bpo-39327: shutil.rmtree() can now work with VirtualBox
    shared folders when running from the guest operating-system.
  - bpo-46756: Fix a bug in
    urllib.request.HTTPPasswordMgr.find_user_password() and
    urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated()
    which allowed to bypass authorization. For example, access to
    URI example.org/foobar was allowed if the user was authorized
    for URI example.org/foo.
  - bpo-45863: When the tarfile module creates a pax format
    archive, it will put an integer representation of timestamps
    in the ustar header (if possible) for the benefit of older
    unarchivers, in addition to the existing full-precision
    timestamps in the pax extended header.
  - bpo-46672: Fix NameError in asyncio.gather() when initial
    type check fails.
  - bpo-45948: Fixed a discrepancy in the C implementation of the
    xml.etree.ElementTree module. Now, instantiating an
    xml.etree.ElementTree.XMLParser with a target=None keyword
    provides a default xml.etree.ElementTree.TreeBuilder target
    as the Python implementation does.
  - bpo-46591: Make the IDLE doc URL on the About IDLE dialog
    clickable.
  - bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4
  - bpo-46487: Add the get_write_buffer_limits method to
    asyncio.transports.WriteTransport and to the SSL transport.
  - bpo-46539: In typing.get_type_hints(), support evaluating
    stringified ClassVar and Final annotations inside Annotated.
    Patch by Gregory Beauregard.
  - bpo-46491: Allow typing.Annotated to wrap typing.Final and
    typing.ClassVar. Patch by Gregory Beauregard.
  - bpo-46436: Fix command-line option -d/--directory in module
    http.server which is ignored when combined with command-line
    option --cgi. Patch by Géry Ogam.
  - bpo-41403: Make mock.patch() raise a TypeError with
    a relevant error message on invalid arg. Previously it
    allowed a cryptic AttributeError to escape.
  - bpo-46474: In importlib.metadata.EntryPoint.pattern, avoid
    potential REDoS by limiting ambiguity in consecutive
    whitespace.
  - bpo-46469: asyncio generic classes now return
    types.GenericAlias in __class_getitem__ instead of the same
    class.
  - bpo-46434: pdb now gracefully handles help when __doc__ is
    missing, for example when run with pregenerated optimized
    .pyc files.
  - bpo-46333: The __eq__() and __hash__() methods of
    typing.ForwardRef now honor the module parameter of
    typing.ForwardRef. Forward references from different modules
    are now differentiated.
  - bpo-43118: Fix a bug in inspect.signature() that was causing
    it to fail on some subclasses of classes with
    a __text_signature__ referencing module globals. Patch by
    Weipeng Hong.
  - bpo-21987: Fix an issue with tarfile.TarFile.getmember()
    getting a directory name with a trailing slash.
  - bpo-20392: Fix inconsistency with uppercase file extensions
    in MimeTypes.guess_type(). Patch by Kumar Aditya.
  - bpo-46080: Fix exception in argparse help text generation if
    a argparse.BooleanOptionalAction argument’s default is
    argparse.SUPPRESS and it has help specified. Patch by Felix
    Fontein.
  - bpo-44439: Fix .write() method of a member file in ZipFile,
    when the input data is an object that supports the buffer
    protocol, the file length may be wrong.
  - bpo-45703: When a namespace package is imported before
    another module from the same namespace is created/installed
    in a different sys.path location while the program is
    running, calling the importlib.invalidate_caches() function
    will now also guarantee the new module is noticed.
  - bpo-24959: Fix bug where unittest sometimes drops frames from
    tracebacks of exceptions raised in tests.
  - bpo-46463: Fixes escape4chm.py script used when building the
    CHM documentation file
  - bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is
    built with undefined behavior sanitizer (UBSAN): disable
    UBSAN on the faulthandler_sigfpe() function. Patch by Victor
    Stinner.
  - bpo-46708: Prevent default asyncio event loop policy
    modification warning after test_asyncio execution.
  - bpo-46616: Ensures test_importlib.test_windows cleans up
    registry keys after completion.
  - bpo-44359: test_ftplib now silently ignores socket errors to
    prevent logging unhandled threading exceptions. Patch by
    Victor Stinner.
  - bpo-46542: Fix a Python crash in test_lib2to3 when using
    Python built in debug mode: limit the recursion limit. Patch
    by Victor Stinner.
  - bpo-46576: test_peg_generator now disables compiler
    optimization when testing compilation of its own C extensions
    to significantly speed up the testing on non-debug builds of
    CPython.
  - bpo-46542: Fix test_json tests checking for RecursionError:
    modify these tests to use support.infinite_recursion(). Patch
    by Victor Stinner.
  - bpo-13886: Skip test_builtin PTY tests on non-ASCII
    characters if the readline module is loaded. The readline
    module changes input() behavior, but test_builtin is not
    intented to test the readline module. Patch by Victor
    Stinner.
  - bpo-38472: Fix GCC detection in setup.py when
    cross-compiling. The C compiler is now run with LC_ALL=C.
    Previously, the detection failed with a German locale.
  - bpo-46513: configure no longer uses AC_C_CHAR_UNSIGNED macro
    and pyconfig.h no longer defines reserved symbol
    __CHAR_UNSIGNED__.
  - bpo-45925: Update Windows installer to use SQLite 3.37.2.
  - bpo-45296: Clarify close, quit, and exit in IDLE. In the File
    menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current
    one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows).
    In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there
    are no other windows, this also exits IDLE.
  - bpo-45447: Apply IDLE syntax highlighting to pyi files. Patch
    by Alex Waygood and Terry Jan Reedy.
- Removed upstreamed patches:
  - support-expat-245.patch</changelog>
  <changelog author="mcepl@suse.com" date="1653048000">- Update to 3.9.13:
  - Core and Builtins
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-46775: Some Windows system error codes(&gt;= 10000) are
    now mapped into the correct errno and may now raise
    a subclass of OSError. Patch by Dong-hee Na.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are pickle.PickleBuffer,
    testcapi.RecursingInfinitelyError, and types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91734: Fix OSS audio support on Solaris.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-34480: Fix a bug where _markupbase raised an
    UnboundLocalError when an invalid keyword was found in
    marked section. Patch by Marek Suscak.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-44911: IsolatedAsyncioTestCase will no longer throw an
    exception while cancelling leaked tasks. Patch by Bar
    Harel.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 2.4.4.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Build
  - bpo-47103: Windows PGInstrument builds now copy a required
    DLL into the output directory, making it easier to run the
    profile stage of a PGO build.
  - Windows
  - bpo-47194: Update zlib to v1.2.12 to resolve
    CVE-2018-25032.
  - bpo-46785: Fix race condition between os.stat() and
    unlinking a file on Windows, by using errors codes returned
    by FindFirstFileW() when appropriate in win32_xstat_impl.
  - bpo-40859: Update Windows build to use xz-5.2.5
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.
- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.4 (jsc#SLE-21253)</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.
- (bsc#1196784, CVE-2022-25236) Rename patch:
  support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch
  and update the patch to detect expat &gt;= 2.4.4 instead of &gt;= 2.4.5
  as it was fully patched against CVE-2022-25236.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.9.14:
  - (CVE-2020-10735, bsc#1203125). Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises a
    ValueError if the number of digits in string form is above a
    limit to avoid potential denial of service attacks due to the
    algorithmic complexity.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Also other bug fixes:
  - http.server: Fix an open redirection vulnerability in the
    HTTP server when an URI path starts with //. Vulnerability
    discovered, and initial fix proposed, by Hamza Avvan.
  - Fix contextvars HAMT implementation to handle iteration
    over deep trees. The bug was discovered and fixed by Eli
    Libman. See MagicStack/immutables#84 for more details.
  - Fix binding of unix socket to empty address on Linux to use
    an available address from the abstract namespace, instead
    of “0”.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix the formatting for await x and not x in the operator
    precedence table when using the help() system.
  - Fix ensurepip environment isolation for subprocess running
    pip.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - test_ssl is now checking for supported TLS version and
    protocols in more tests.
- Removed upstreamed patches:
  - CVE-2021-28861-double-slash-path.patch
- Realign patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - sphinx-update-removed-function.patch</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.9.15:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - Update bundled libexpat to 2.4.9</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.9.16:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed to the
    stderr server log.
    This is done by changing the http.server
    BaseHTTPRequestHandler .log_message method to replace control
    characters with a \xHH hex escape before printing.
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2015-20107).
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication with
    the forkserver process instead of the Linux abstract socket
    namespace. Only code that chooses to use the “forkserver”
    start method is affected.
    Abstract sockets have no permissions and could allow any
    user on the system in the same network namespace (often
    the whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict this
    to the forkserver process user as was the default in Python
    3.8 and earlier.
    This prevents Linux CVE-2022-42919.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
- Removed upstreamed patches:
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mliska@suse.cz" date="1673611200">- Suppress warnings for Sphinx 6.0+.</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="eac9678563c3bfa4fa4b1e363e3533a0cc6d72b6a73c02380e29b805b2944894" name="libpython3_9-1_0" arch="x86_64">
  <version epoch="0" ver="3.9.16" rel="150300.4.27.1"/>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1648296000">- Update to 3.9.12:
  - bpo-46968: Check for the existence of the “sys/auxv.h” header
    in faulthandler to avoid compilation problems in systems
    where this header doesn’t exist. Patch by Pablo Galindo
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers on
    OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-23691: Protect the re.finditer() iterator from
    re-entering.
  - bpo-42369: Fix thread safety of zipfile._SharedFile.tell() to
    avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception
    when reading a ZipFile from multiple threads.
  - bpo-38256: Fix binascii.crc32() when it is compiled to use
    zlib’c crc32 to work properly on inputs 4+GiB in length
    instead of returning the wrong result. The workaround prior
    to this was to always feed the function data in increments
    smaller than 4GiB or to just call the zlib module function.
  - bpo-39394: A warning about inline flags not at the start of
    the regular expression now contains the position of the flag.
  - bpo-47061: Deprecate the various modules listed by PEP 594:
  - aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt,
    imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd,
    sndhdr, spwd, sunau, telnetlib, uu, xdrlib
  - bpo-2604: Fix bug where doctests using globals would fail
    when run multiple times.
  - bpo-45997: Fix asyncio.Semaphore re-aquiring FIFO order.
  - bpo-47022: The asynchat, asyncore and smtpd modules have been
    deprecated since at least Python 3.6. Their documentation has
    now been updated to note they will removed in Python 3.12
    (PEP 594).
  - bpo-46421: Fix a unittest issue where if the command was
    invoked as python -m unittest and the filename(s) began with
    a dot (.), a ValueError is returned.
  - bpo-40296: Fix supporting generic aliases in pydoc.
  - bpo-14156: argparse.FileType now supports an argument of ‘-’
    in binary mode, returning the .buffer attribute of
    sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and
    ‘a’ are treated equivalently to ‘w’ when argument is ‘-’.
    Patch contributed by Josh Rosenberg
- Update to 3.9.11:
  - bpo-46852: Rename the private undocumented
    float.__set_format__() method to float.__setformat__() to fix
    a typo introduced in Python 3.7. The method is only used by
    test_float. Patch by Victor Stinner.
  - bpo-46794: Bump up the libexpat version into 2.4.6
  - bpo-46762: Fix an assert failure in debug builds when a ‘&lt;’,
    ‘&gt;’, or ‘=’ is the last character in an f-string that’s
    missing a closing right brace.
  - bpo-46732: Correct the docstring for the __bool__() method.
    Patch by Jelle Zijlstra.
  - bpo-40479: Add a missing call to va_end() in
    Modules/_hashopenssl.c.
  - bpo-46615: When iterating over sets internally in
    setobject.c, acquire strong references to the resulting items
    from the set. This prevents crashes in corner-cases of
    various set operations where the set gets mutated.
  - bpo-43721: Fix docstrings of getter, setter, and deleter to
    clarify that they create a new copy of the property.
  - bpo-46503: Fix an assert when parsing some invalid N escape
    sequences in f-strings.
  - bpo-46417: Fix a race condition on setting a type __bases__
    attribute: the internal function add_subclass() now gets the
    PyTypeObject.tp_subclasses member after calling
    PyWeakref_NewRef() which can trigger a garbage collection
    which can indirectly modify PyTypeObject.tp_subclasses. Patch
    by Victor Stinner.
  - bpo-46383: Fix invalid signature of _zoneinfo’s module_free
    function to resolve a crash on wasm32-emscripten platform.
  - bpo-43253: Fix a crash when closing transports where the
    underlying socket handle is already invalid on the Proactor
    event loop.
  - bpo-47004: Apply bugfixes from importlib_metadata 4.11.3,
    including bugfix for EntryPoint.extras, which was returning
    match objects and not the extras strings.
  - bpo-46985: Upgrade pip wheel bundled with ensurepip (pip
    22.0.4, bnc#1186819, CVE-2021-3572)
  - bpo-46968: faulthandler: On Linux 5.14 and newer, dynamically
    determine size of signal handler stack size CPython allocates
    using getauxval(AT_MINSIGSTKSZ). This changes allows for
    Python extension’s request to Linux kernel to use AMX_TILE
    instruction set on Sapphire Rapids Xeon processor to succeed,
    unblocking use of the ISA in frameworks.
  - bpo-46955: Expose asyncio.base_events.Server as
    asyncio.Server. Patch by Stefan Zabka.
  - bpo-46932: Update bundled libexpat to 2.4.7
  - bpo-25707: Fixed a file leak in
    xml.etree.ElementTree.iterparse() when the iterator is not
    exhausted. Patch by Jacob Walls.
  - bpo-44886: Inherit asyncio proactor datagram transport from
    asyncio.DatagramTransport.
  - bpo-46827: Support UDP sockets in asyncio.loop.sock_connect()
    for selector-based event loops. Patch by Thomas Grainger.
  - bpo-46811: Make test suite support Expat &gt;=2.4.5
  - bpo-46252: Raise TypeError if ssl.SSLSocket is passed to
    transport-based APIs.
  - bpo-46784: Fix libexpat symbols collisions with user
    dynamically loaded or statically linked libexpat in embedded
    Python.
  - bpo-39327: shutil.rmtree() can now work with VirtualBox
    shared folders when running from the guest operating-system.
  - bpo-46756: Fix a bug in
    urllib.request.HTTPPasswordMgr.find_user_password() and
    urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated()
    which allowed to bypass authorization. For example, access to
    URI example.org/foobar was allowed if the user was authorized
    for URI example.org/foo.
  - bpo-45863: When the tarfile module creates a pax format
    archive, it will put an integer representation of timestamps
    in the ustar header (if possible) for the benefit of older
    unarchivers, in addition to the existing full-precision
    timestamps in the pax extended header.
  - bpo-46672: Fix NameError in asyncio.gather() when initial
    type check fails.
  - bpo-45948: Fixed a discrepancy in the C implementation of the
    xml.etree.ElementTree module. Now, instantiating an
    xml.etree.ElementTree.XMLParser with a target=None keyword
    provides a default xml.etree.ElementTree.TreeBuilder target
    as the Python implementation does.
  - bpo-46591: Make the IDLE doc URL on the About IDLE dialog
    clickable.
  - bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4
  - bpo-46487: Add the get_write_buffer_limits method to
    asyncio.transports.WriteTransport and to the SSL transport.
  - bpo-46539: In typing.get_type_hints(), support evaluating
    stringified ClassVar and Final annotations inside Annotated.
    Patch by Gregory Beauregard.
  - bpo-46491: Allow typing.Annotated to wrap typing.Final and
    typing.ClassVar. Patch by Gregory Beauregard.
  - bpo-46436: Fix command-line option -d/--directory in module
    http.server which is ignored when combined with command-line
    option --cgi. Patch by Géry Ogam.
  - bpo-41403: Make mock.patch() raise a TypeError with
    a relevant error message on invalid arg. Previously it
    allowed a cryptic AttributeError to escape.
  - bpo-46474: In importlib.metadata.EntryPoint.pattern, avoid
    potential REDoS by limiting ambiguity in consecutive
    whitespace.
  - bpo-46469: asyncio generic classes now return
    types.GenericAlias in __class_getitem__ instead of the same
    class.
  - bpo-46434: pdb now gracefully handles help when __doc__ is
    missing, for example when run with pregenerated optimized
    .pyc files.
  - bpo-46333: The __eq__() and __hash__() methods of
    typing.ForwardRef now honor the module parameter of
    typing.ForwardRef. Forward references from different modules
    are now differentiated.
  - bpo-43118: Fix a bug in inspect.signature() that was causing
    it to fail on some subclasses of classes with
    a __text_signature__ referencing module globals. Patch by
    Weipeng Hong.
  - bpo-21987: Fix an issue with tarfile.TarFile.getmember()
    getting a directory name with a trailing slash.
  - bpo-20392: Fix inconsistency with uppercase file extensions
    in MimeTypes.guess_type(). Patch by Kumar Aditya.
  - bpo-46080: Fix exception in argparse help text generation if
    a argparse.BooleanOptionalAction argument’s default is
    argparse.SUPPRESS and it has help specified. Patch by Felix
    Fontein.
  - bpo-44439: Fix .write() method of a member file in ZipFile,
    when the input data is an object that supports the buffer
    protocol, the file length may be wrong.
  - bpo-45703: When a namespace package is imported before
    another module from the same namespace is created/installed
    in a different sys.path location while the program is
    running, calling the importlib.invalidate_caches() function
    will now also guarantee the new module is noticed.
  - bpo-24959: Fix bug where unittest sometimes drops frames from
    tracebacks of exceptions raised in tests.
  - bpo-46463: Fixes escape4chm.py script used when building the
    CHM documentation file
  - bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is
    built with undefined behavior sanitizer (UBSAN): disable
    UBSAN on the faulthandler_sigfpe() function. Patch by Victor
    Stinner.
  - bpo-46708: Prevent default asyncio event loop policy
    modification warning after test_asyncio execution.
  - bpo-46616: Ensures test_importlib.test_windows cleans up
    registry keys after completion.
  - bpo-44359: test_ftplib now silently ignores socket errors to
    prevent logging unhandled threading exceptions. Patch by
    Victor Stinner.
  - bpo-46542: Fix a Python crash in test_lib2to3 when using
    Python built in debug mode: limit the recursion limit. Patch
    by Victor Stinner.
  - bpo-46576: test_peg_generator now disables compiler
    optimization when testing compilation of its own C extensions
    to significantly speed up the testing on non-debug builds of
    CPython.
  - bpo-46542: Fix test_json tests checking for RecursionError:
    modify these tests to use support.infinite_recursion(). Patch
    by Victor Stinner.
  - bpo-13886: Skip test_builtin PTY tests on non-ASCII
    characters if the readline module is loaded. The readline
    module changes input() behavior, but test_builtin is not
    intented to test the readline module. Patch by Victor
    Stinner.
  - bpo-38472: Fix GCC detection in setup.py when
    cross-compiling. The C compiler is now run with LC_ALL=C.
    Previously, the detection failed with a German locale.
  - bpo-46513: configure no longer uses AC_C_CHAR_UNSIGNED macro
    and pyconfig.h no longer defines reserved symbol
    __CHAR_UNSIGNED__.
  - bpo-45925: Update Windows installer to use SQLite 3.37.2.
  - bpo-45296: Clarify close, quit, and exit in IDLE. In the File
    menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current
    one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows).
    In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there
    are no other windows, this also exits IDLE.
  - bpo-45447: Apply IDLE syntax highlighting to pyi files. Patch
    by Alex Waygood and Terry Jan Reedy.
- Removed upstreamed patches:
  - support-expat-245.patch</changelog>
  <changelog author="mcepl@suse.com" date="1653048000">- Update to 3.9.13:
  - Core and Builtins
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-46775: Some Windows system error codes(&gt;= 10000) are
    now mapped into the correct errno and may now raise
    a subclass of OSError. Patch by Dong-hee Na.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are pickle.PickleBuffer,
    testcapi.RecursingInfinitelyError, and types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91734: Fix OSS audio support on Solaris.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-34480: Fix a bug where _markupbase raised an
    UnboundLocalError when an invalid keyword was found in
    marked section. Patch by Marek Suscak.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-44911: IsolatedAsyncioTestCase will no longer throw an
    exception while cancelling leaked tasks. Patch by Bar
    Harel.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 2.4.4.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Build
  - bpo-47103: Windows PGInstrument builds now copy a required
    DLL into the output directory, making it easier to run the
    profile stage of a PGO build.
  - Windows
  - bpo-47194: Update zlib to v1.2.12 to resolve
    CVE-2018-25032.
  - bpo-46785: Fix race condition between os.stat() and
    unlinking a file on Windows, by using errors codes returned
    by FindFirstFileW() when appropriate in win32_xstat_impl.
  - bpo-40859: Update Windows build to use xz-5.2.5
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.
- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.4 (jsc#SLE-21253)</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.
- (bsc#1196784, CVE-2022-25236) Rename patch:
  support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch
  and update the patch to detect expat &gt;= 2.4.4 instead of &gt;= 2.4.5
  as it was fully patched against CVE-2022-25236.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.9.14:
  - (CVE-2020-10735, bsc#1203125). Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises a
    ValueError if the number of digits in string form is above a
    limit to avoid potential denial of service attacks due to the
    algorithmic complexity.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Also other bug fixes:
  - http.server: Fix an open redirection vulnerability in the
    HTTP server when an URI path starts with //. Vulnerability
    discovered, and initial fix proposed, by Hamza Avvan.
  - Fix contextvars HAMT implementation to handle iteration
    over deep trees. The bug was discovered and fixed by Eli
    Libman. See MagicStack/immutables#84 for more details.
  - Fix binding of unix socket to empty address on Linux to use
    an available address from the abstract namespace, instead
    of “0”.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix the formatting for await x and not x in the operator
    precedence table when using the help() system.
  - Fix ensurepip environment isolation for subprocess running
    pip.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - test_ssl is now checking for supported TLS version and
    protocols in more tests.
- Removed upstreamed patches:
  - CVE-2021-28861-double-slash-path.patch
- Realign patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - sphinx-update-removed-function.patch</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.9.15:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - Update bundled libexpat to 2.4.9</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.9.16:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed to the
    stderr server log.
    This is done by changing the http.server
    BaseHTTPRequestHandler .log_message method to replace control
    characters with a \xHH hex escape before printing.
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2015-20107).
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication with
    the forkserver process instead of the Linux abstract socket
    namespace. Only code that chooses to use the “forkserver”
    start method is affected.
    Abstract sockets have no permissions and could allow any
    user on the system in the same network namespace (often
    the whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict this
    to the forkserver process user as was the default in Python
    3.8 and earlier.
    This prevents Linux CVE-2022-42919.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
- Removed upstreamed patches:
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mliska@suse.cz" date="1673611200">- Suppress warnings for Sphinx 6.0+.</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="c42aa7a8e2e467e7821b4a12c4d25d576ecdaf7b6e4b3ed84ed4a0a8b906dc60" name="libpython3_9-1_0-32bit" arch="x86_64">
  <version epoch="0" ver="3.9.16" rel="150300.4.27.1"/>
  <changelog author="mcepl@suse.com" date="1642593600">- Update to 3.9.10:
  Bugfix-only release</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1648296000">- Update to 3.9.12:
  - bpo-46968: Check for the existence of the “sys/auxv.h” header
    in faulthandler to avoid compilation problems in systems
    where this header doesn’t exist. Patch by Pablo Galindo
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers on
    OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-23691: Protect the re.finditer() iterator from
    re-entering.
  - bpo-42369: Fix thread safety of zipfile._SharedFile.tell() to
    avoid a “zipfile.BadZipFile: Bad CRC-32 for file” exception
    when reading a ZipFile from multiple threads.
  - bpo-38256: Fix binascii.crc32() when it is compiled to use
    zlib’c crc32 to work properly on inputs 4+GiB in length
    instead of returning the wrong result. The workaround prior
    to this was to always feed the function data in increments
    smaller than 4GiB or to just call the zlib module function.
  - bpo-39394: A warning about inline flags not at the start of
    the regular expression now contains the position of the flag.
  - bpo-47061: Deprecate the various modules listed by PEP 594:
  - aifc, asynchat, asyncore, audioop, cgi, cgitb, chunk, crypt,
    imghdr, msilib, nntplib, nis, ossaudiodev, pipes, smtpd,
    sndhdr, spwd, sunau, telnetlib, uu, xdrlib
  - bpo-2604: Fix bug where doctests using globals would fail
    when run multiple times.
  - bpo-45997: Fix asyncio.Semaphore re-aquiring FIFO order.
  - bpo-47022: The asynchat, asyncore and smtpd modules have been
    deprecated since at least Python 3.6. Their documentation has
    now been updated to note they will removed in Python 3.12
    (PEP 594).
  - bpo-46421: Fix a unittest issue where if the command was
    invoked as python -m unittest and the filename(s) began with
    a dot (.), a ValueError is returned.
  - bpo-40296: Fix supporting generic aliases in pydoc.
  - bpo-14156: argparse.FileType now supports an argument of ‘-’
    in binary mode, returning the .buffer attribute of
    sys.stdin/sys.stdout as appropriate. Modes including ‘x’ and
    ‘a’ are treated equivalently to ‘w’ when argument is ‘-’.
    Patch contributed by Josh Rosenberg
- Update to 3.9.11:
  - bpo-46852: Rename the private undocumented
    float.__set_format__() method to float.__setformat__() to fix
    a typo introduced in Python 3.7. The method is only used by
    test_float. Patch by Victor Stinner.
  - bpo-46794: Bump up the libexpat version into 2.4.6
  - bpo-46762: Fix an assert failure in debug builds when a ‘&lt;’,
    ‘&gt;’, or ‘=’ is the last character in an f-string that’s
    missing a closing right brace.
  - bpo-46732: Correct the docstring for the __bool__() method.
    Patch by Jelle Zijlstra.
  - bpo-40479: Add a missing call to va_end() in
    Modules/_hashopenssl.c.
  - bpo-46615: When iterating over sets internally in
    setobject.c, acquire strong references to the resulting items
    from the set. This prevents crashes in corner-cases of
    various set operations where the set gets mutated.
  - bpo-43721: Fix docstrings of getter, setter, and deleter to
    clarify that they create a new copy of the property.
  - bpo-46503: Fix an assert when parsing some invalid N escape
    sequences in f-strings.
  - bpo-46417: Fix a race condition on setting a type __bases__
    attribute: the internal function add_subclass() now gets the
    PyTypeObject.tp_subclasses member after calling
    PyWeakref_NewRef() which can trigger a garbage collection
    which can indirectly modify PyTypeObject.tp_subclasses. Patch
    by Victor Stinner.
  - bpo-46383: Fix invalid signature of _zoneinfo’s module_free
    function to resolve a crash on wasm32-emscripten platform.
  - bpo-43253: Fix a crash when closing transports where the
    underlying socket handle is already invalid on the Proactor
    event loop.
  - bpo-47004: Apply bugfixes from importlib_metadata 4.11.3,
    including bugfix for EntryPoint.extras, which was returning
    match objects and not the extras strings.
  - bpo-46985: Upgrade pip wheel bundled with ensurepip (pip
    22.0.4, bnc#1186819, CVE-2021-3572)
  - bpo-46968: faulthandler: On Linux 5.14 and newer, dynamically
    determine size of signal handler stack size CPython allocates
    using getauxval(AT_MINSIGSTKSZ). This changes allows for
    Python extension’s request to Linux kernel to use AMX_TILE
    instruction set on Sapphire Rapids Xeon processor to succeed,
    unblocking use of the ISA in frameworks.
  - bpo-46955: Expose asyncio.base_events.Server as
    asyncio.Server. Patch by Stefan Zabka.
  - bpo-46932: Update bundled libexpat to 2.4.7
  - bpo-25707: Fixed a file leak in
    xml.etree.ElementTree.iterparse() when the iterator is not
    exhausted. Patch by Jacob Walls.
  - bpo-44886: Inherit asyncio proactor datagram transport from
    asyncio.DatagramTransport.
  - bpo-46827: Support UDP sockets in asyncio.loop.sock_connect()
    for selector-based event loops. Patch by Thomas Grainger.
  - bpo-46811: Make test suite support Expat &gt;=2.4.5
  - bpo-46252: Raise TypeError if ssl.SSLSocket is passed to
    transport-based APIs.
  - bpo-46784: Fix libexpat symbols collisions with user
    dynamically loaded or statically linked libexpat in embedded
    Python.
  - bpo-39327: shutil.rmtree() can now work with VirtualBox
    shared folders when running from the guest operating-system.
  - bpo-46756: Fix a bug in
    urllib.request.HTTPPasswordMgr.find_user_password() and
    urllib.request.HTTPPasswordMgrWithPriorAuth.is_authenticated()
    which allowed to bypass authorization. For example, access to
    URI example.org/foobar was allowed if the user was authorized
    for URI example.org/foo.
  - bpo-45863: When the tarfile module creates a pax format
    archive, it will put an integer representation of timestamps
    in the ustar header (if possible) for the benefit of older
    unarchivers, in addition to the existing full-precision
    timestamps in the pax extended header.
  - bpo-46672: Fix NameError in asyncio.gather() when initial
    type check fails.
  - bpo-45948: Fixed a discrepancy in the C implementation of the
    xml.etree.ElementTree module. Now, instantiating an
    xml.etree.ElementTree.XMLParser with a target=None keyword
    provides a default xml.etree.ElementTree.TreeBuilder target
    as the Python implementation does.
  - bpo-46591: Make the IDLE doc URL on the About IDLE dialog
    clickable.
  - bpo-46400: expat: Update libexpat from 2.4.1 to 2.4.4
  - bpo-46487: Add the get_write_buffer_limits method to
    asyncio.transports.WriteTransport and to the SSL transport.
  - bpo-46539: In typing.get_type_hints(), support evaluating
    stringified ClassVar and Final annotations inside Annotated.
    Patch by Gregory Beauregard.
  - bpo-46491: Allow typing.Annotated to wrap typing.Final and
    typing.ClassVar. Patch by Gregory Beauregard.
  - bpo-46436: Fix command-line option -d/--directory in module
    http.server which is ignored when combined with command-line
    option --cgi. Patch by Géry Ogam.
  - bpo-41403: Make mock.patch() raise a TypeError with
    a relevant error message on invalid arg. Previously it
    allowed a cryptic AttributeError to escape.
  - bpo-46474: In importlib.metadata.EntryPoint.pattern, avoid
    potential REDoS by limiting ambiguity in consecutive
    whitespace.
  - bpo-46469: asyncio generic classes now return
    types.GenericAlias in __class_getitem__ instead of the same
    class.
  - bpo-46434: pdb now gracefully handles help when __doc__ is
    missing, for example when run with pregenerated optimized
    .pyc files.
  - bpo-46333: The __eq__() and __hash__() methods of
    typing.ForwardRef now honor the module parameter of
    typing.ForwardRef. Forward references from different modules
    are now differentiated.
  - bpo-43118: Fix a bug in inspect.signature() that was causing
    it to fail on some subclasses of classes with
    a __text_signature__ referencing module globals. Patch by
    Weipeng Hong.
  - bpo-21987: Fix an issue with tarfile.TarFile.getmember()
    getting a directory name with a trailing slash.
  - bpo-20392: Fix inconsistency with uppercase file extensions
    in MimeTypes.guess_type(). Patch by Kumar Aditya.
  - bpo-46080: Fix exception in argparse help text generation if
    a argparse.BooleanOptionalAction argument’s default is
    argparse.SUPPRESS and it has help specified. Patch by Felix
    Fontein.
  - bpo-44439: Fix .write() method of a member file in ZipFile,
    when the input data is an object that supports the buffer
    protocol, the file length may be wrong.
  - bpo-45703: When a namespace package is imported before
    another module from the same namespace is created/installed
    in a different sys.path location while the program is
    running, calling the importlib.invalidate_caches() function
    will now also guarantee the new module is noticed.
  - bpo-24959: Fix bug where unittest sometimes drops frames from
    tracebacks of exceptions raised in tests.
  - bpo-46463: Fixes escape4chm.py script used when building the
    CHM documentation file
  - bpo-46913: Fix test_faulthandler.test_sigfpe() if Python is
    built with undefined behavior sanitizer (UBSAN): disable
    UBSAN on the faulthandler_sigfpe() function. Patch by Victor
    Stinner.
  - bpo-46708: Prevent default asyncio event loop policy
    modification warning after test_asyncio execution.
  - bpo-46616: Ensures test_importlib.test_windows cleans up
    registry keys after completion.
  - bpo-44359: test_ftplib now silently ignores socket errors to
    prevent logging unhandled threading exceptions. Patch by
    Victor Stinner.
  - bpo-46542: Fix a Python crash in test_lib2to3 when using
    Python built in debug mode: limit the recursion limit. Patch
    by Victor Stinner.
  - bpo-46576: test_peg_generator now disables compiler
    optimization when testing compilation of its own C extensions
    to significantly speed up the testing on non-debug builds of
    CPython.
  - bpo-46542: Fix test_json tests checking for RecursionError:
    modify these tests to use support.infinite_recursion(). Patch
    by Victor Stinner.
  - bpo-13886: Skip test_builtin PTY tests on non-ASCII
    characters if the readline module is loaded. The readline
    module changes input() behavior, but test_builtin is not
    intented to test the readline module. Patch by Victor
    Stinner.
  - bpo-38472: Fix GCC detection in setup.py when
    cross-compiling. The C compiler is now run with LC_ALL=C.
    Previously, the detection failed with a German locale.
  - bpo-46513: configure no longer uses AC_C_CHAR_UNSIGNED macro
    and pyconfig.h no longer defines reserved symbol
    __CHAR_UNSIGNED__.
  - bpo-45925: Update Windows installer to use SQLite 3.37.2.
  - bpo-45296: Clarify close, quit, and exit in IDLE. In the File
    menu, ‘Close’ and ‘Exit’ are now ‘Close Window’ (the current
    one) and ‘Exit’ is now ‘Exit IDLE’ (by closing all windows).
    In Shell, ‘quit()’ and ‘exit()’ mean ‘close Shell’. If there
    are no other windows, this also exits IDLE.
  - bpo-45447: Apply IDLE syntax highlighting to pyi files. Patch
    by Alex Waygood and Terry Jan Reedy.
- Removed upstreamed patches:
  - support-expat-245.patch</changelog>
  <changelog author="mcepl@suse.com" date="1653048000">- Update to 3.9.13:
  - Core and Builtins
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-46775: Some Windows system error codes(&gt;= 10000) are
    now mapped into the correct errno and may now raise
    a subclass of OSError. Patch by Dong-hee Na.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are pickle.PickleBuffer,
    testcapi.RecursingInfinitelyError, and types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91734: Fix OSS audio support on Solaris.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-34480: Fix a bug where _markupbase raised an
    UnboundLocalError when an invalid keyword was found in
    marked section. Patch by Marek Suscak.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-44911: IsolatedAsyncioTestCase will no longer throw an
    exception while cancelling leaked tasks. Patch by Bar
    Harel.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 2.4.4.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Build
  - bpo-47103: Windows PGInstrument builds now copy a required
    DLL into the output directory, making it easier to run the
    profile stage of a PGO build.
  - Windows
  - bpo-47194: Update zlib to v1.2.12 to resolve
    CVE-2018-25032.
  - bpo-46785: Fix race condition between os.stat() and
    unlinking a file on Windows, by using errors codes returned
    by FindFirstFileW() when appropriate in win32_xstat_impl.
  - bpo-40859: Update Windows build to use xz-5.2.5
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.
- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.4 (jsc#SLE-21253)</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.
- (bsc#1196784, CVE-2022-25236) Rename patch:
  support-expat-245.patch to support-expat-CVE-2022-25236-patched.patch
  and update the patch to detect expat &gt;= 2.4.4 instead of &gt;= 2.4.5
  as it was fully patched against CVE-2022-25236.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.9.14:
  - (CVE-2020-10735, bsc#1203125). Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises a
    ValueError if the number of digits in string form is above a
    limit to avoid potential denial of service attacks due to the
    algorithmic complexity.
    This new limit can be configured or disabled by environment
    variable, command line flag, or sys APIs. See the integer
    string conversion length limitation documentation. The
    default limit is 4300 digits in string form.
  - Also other bug fixes:
  - http.server: Fix an open redirection vulnerability in the
    HTTP server when an URI path starts with //. Vulnerability
    discovered, and initial fix proposed, by Hamza Avvan.
  - Fix contextvars HAMT implementation to handle iteration
    over deep trees. The bug was discovered and fixed by Eli
    Libman. See MagicStack/immutables#84 for more details.
  - Fix binding of unix socket to empty address on Linux to use
    an available address from the abstract namespace, instead
    of “0”.
  - Suppress writing an XML declaration in open files
    in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - Fix the formatting for await x and not x in the operator
    precedence table when using the help() system.
  - Fix ensurepip environment isolation for subprocess running
    pip.
  - Fix problem with test_ssl test_get_ciphers on systems that
    require perfect forward secrecy (PFS) ciphers.
  - test_ssl is now checking for supported TLS version and
    protocols in more tests.
- Removed upstreamed patches:
  - CVE-2021-28861-double-slash-path.patch
- Realign patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - sphinx-update-removed-function.patch</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.9.15:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - Update bundled libexpat to 2.4.9</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.9.16:
  - python -m http.server no longer allows terminal control
    characters sent within a garbage request to be printed to the
    stderr server log.
    This is done by changing the http.server
    BaseHTTPRequestHandler .log_message method to replace control
    characters with a \xHH hex escape before printing.
  - Avoid publishing list of active per-interpreter audit hooks
    via the gc module
  - The IDNA codec decoder used on DNS hostnames by socket or
    asyncio related name resolution functions no longer involves
    a quadratic algorithm. This prevents a potential CPU denial
    of service if an out-of-spec excessive length hostname
    involving bidirectional characters were decoded. Some
    protocols such as urllib http 3xx redirects potentially allow
    for an attacker to supply such a name (CVE-2015-20107).
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns to using
    filesystem backed unix domain sockets for communication with
    the forkserver process instead of the Linux abstract socket
    namespace. Only code that chooses to use the “forkserver”
    start method is affected.
    Abstract sockets have no permissions and could allow any
    user on the system in the same network namespace (often
    the whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict this
    to the forkserver process user as was the default in Python
    3.8 and earlier.
    This prevents Linux CVE-2022-42919.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
- Removed upstreamed patches:
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="mliska@suse.cz" date="1673611200">- Suppress warnings for Sphinx 6.0+.</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="a81c64b9e1f318b6889a834383bb49261b592fe82a5398125cfaafc99bc2caf6" name="libquadmath0" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5e02dcd8f1e51ac1bda62c6f5acf34be8a646e8452cf8edc0a7847c0a18040bf" name="libquadmath0" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8f61f94ebe216174edba71713095bcbacb0bd451bc7d1b4e2f4481c4eb4f142f" name="libquadmath0-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9459f90c044395b823ca39f58711f0b92a017b5f0e83050e2a6a62189ca4188a" name="librelp" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1373544000">- update to 1.1.4:
  This version of the library provides certificate wildcard name
  checks. It also supports enhanced performance options (burst
  support, requires support from the caller). It also contains
  some bug fixes, especially for BSD.
  - fix build problems on BSD
  - add ability to specify a non-standard RELP Window size
  - add burst support to the client API
  - wildcards are now supported in TLS name peer authentication
  - new APIs: relpCltHintBurstBegin, relpCltHintBurstEnd,
    relpCltSetWindowSize</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1373544001">- update to 1.1.5:
  This is a bug-fixing release that takes care of a memory leak on
  connection close as well as potential misadressing on session
  close.
  - bugfix: memory leak on connection close
  - bugfix: potential misadressing on session close</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1373976000">- update to 1.2.0:
  - support for epoll() added
  - API extension: relpEngineSetOnGenericErr</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1389700800">- update to 1.2.2:
  - add capability to enable tcp KEEPALIVE
  - introduced new API relpSrvSetKeepAlive() to support KEEPALIVE
  - errors binding listener port are now reported via error message
    callback</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1394798400">- update to 1.2.3:
  - add ability to build librelp without TLS
  - API change: two functions that used to return void now return
    state:
  * relpSrvEnableTLS();
  * relpSrvEnableTLSZip();</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1395057600">- update to 1.2.4:
  - correct API/ABI change in 1.2.3
  - revert back to previous state (return void)
  * relpSrvEnableTLS();
  * relpSrvEnableTLSZip();
    These functions are now deprecated.
  - introduce new functions that return a state
  * relpSrvEnableTLS2();
  * relpSrvEnableTLSZip2();</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1395316800">- update to 1.2.5:
  - permit to use anonymous TLS on platforms where GnuTLS lacks
    certificate verification function</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398772800">- update to 1.2.7
  - bugfix: librelp was incompatible with C++ without a real reason
  - bugfix: potential misadressing in wildcard match
  - bugfix: always last wildcard match was reported, not first
- contains changes from 1.2.6
  - report error when preparing for non-anon TLS and this is
    unsupported</changelog>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="0872129690a8f49aeaefa89864fb66858479fc12f789cbb73b3cfb33a45e4e30" name="librelp-devel" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="a751c46587a3fce105f8cff03aa31c8197f8e05de2d9b26c7a0eb4257b86460e" name="librelp-devel" arch="ppc64le">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="23e84a960083f1f0d12b562025b66d0a63721935f6d1f4dfdadfe2285b976f49" name="librelp-devel" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="b5023a8f655be70e8a47d63bac38365b5de2b341532e995fa512a1ccd0c147f6" name="librelp-devel" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="dbd38598a26ec20c573ed4afc6fb8f352faf38cd65699387bf1339da83c7cca1" name="librelp0" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="5d7cee5b41661788f4843ff4bb648d46a5728fdc636754f0a2420c24fbc038d0" name="librelp0" arch="ppc64le">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="90237cf25fea6e56da2fb6952fa86c37d525064aa772c6d93c7e70c8d3b03d35" name="librelp0" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="4516d4bd605263fed6a41cf760975ef67092717da2df075143791af7ca68cf13" name="librelp0" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1441713600">- librelp 1.2.8:
  * fix segfault if KEEPALIVE is used</changelog>
  <changelog author="astieger@suse.com" date="1451736000">- librelp 1.2.9:
  * Ignoring return status when handling syslog frames now.
    Otherwise valid messages in the frame buffer will get lost when
    the remote connection is closed during meantime.</changelog>
  <changelog author="mrueckert@suse.de" date="1453982400">- fix build on sle11. the sles_version conditional is just broken</changelog>
  <changelog author="mpluskal@suse.com" date="1454932800">- Make building more verbose</changelog>
  <changelog author="astieger@suse.com" date="1459771200">- librelp 1.2.10:
  * fix a problem with sending large buffers
  * improve sender/receiver code
  * enable compatibility with older versions of GnuTLS</changelog>
  <changelog author="astieger@suse.com" date="1467115200">- librelp 1.2.11:
  * do not accept more than one "open" verb on a connection
  * fix potential segfault when high-numbered fd is used in sender
  * make librelp not run in thight loop when out of sockets
  * flush the current recv frame if it exists if the client session
    is restarting
  * API enhancement: add configurable connection timeout</changelog>
  <changelog author="astieger@suse.com" date="1468152000">- librelp 1.2.12:
  * API enhancement: permit to set connection timeout
  * cleanup: replace deprecated GnuTLS data types by current ones</changelog>
  <changelog author="ndas@suse.com" date="1485777600">- This updated library is needed for latest rsyslog(fate#320546)</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- librelp 1.2.13:
  * bugfix: duplicated lines after server reconnect</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- librelp 1.2.14:
  * API extension: add relpSrvSetMaxDataSize()</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- librelp 1.2.15:
  * CVE-2018-1000140: A remote attackher could have used specially
    crafted x509 certificates when connecting to rsyslog to trigger
    a stack buffer overflow and run arbitrary code (bsc#1086730)
  * bugfix: invalid handling of snprintf() return code
  * bugfix: invalid assert predicate
  * some code cleanup
  * bugfix: error message on open error was truncated</changelog>
  <changelog author="thomas.blume@suse.com" date="1681905600">- update to librelp 1.11.0 (bsc#1210649)
  the previous version became incompatible with current rsyslog
  version 8.2106.0
- Important changes per version
  Version 1.11.0 - 2023-01-10
- code cleanup
- AIX: Changed ERRNO handling after connect in tcp.c
- AIX: Add handling for other ERRNO codes in tcp.c
- bugfix/TCP: relpTcpGetRtryDirection onyl needs to check direction if SSL is active.
- AIX: in relpTcpRcv we need to set RETRY_recv if errno is 0
- openssl: fix openssl exit code avoid double free of ctx
- librelp hardening: Fix multiple minor issues causing debugging trouble
- OpenSSL: fix depreacted API issues for OpenSSL 3.x
- bugfix: compatiblity problem with openssl 1.1
- bugfix: Forward return code from relpEngineSetTLSLib to relpEngineSetTLSLibName
- bugfix: make relpEngineSetTLSLib debug safe
- bugfix: warnings reported by coverity scan
- gnutls drvr bugfix: library called exit() under some circumstances
  Version 1.10.0 - 2021-02-16
- TLS handling bugfix
  Version 1.9.0 - 2020-11-24
- openssl bugfix: preprocessor check for tlsconfigcmd code
- solaris compatibility fix: add strndup compatibility code
  Version 1.8.0 - 2020-09-29
- gnutls "bugfix": handle receives who break connection on close
- gnutls bugfix: per-session memory leak
- tls bugfix: RETRY not correctly handled in TLS Mode &amp; CI improvement
- bugfix: librelp.h contains duplicate function definition
- removed some more externally visible symbols not being part of API
  Version 1.7.0 - 2020-08-25
- some internal cleanup (const attributes and such)
- bugfix: library did export non-API symbols
- openssl: Fix chained certificate files for older OpenSSL Version.
- fix FD leak when socket shutdown is one-sided
- TLS: Added call to destruct OpenSSL remains to relpEngineDestruct
- fix memory leak on session break
  Version 1.6.0 - 2020-04-21
- fix namespace pollution - some non-API functions were exported
- replsess: fix double free of sendbuf in some cases.
- improve support for libressl
- Modified GnuTLS priority according to standard crypto-policy guideline
- tcp: Missing pUsr Copy to relpTcp Pointer fixed in relpTcpAcceptConnReq
- report io errors for plain tcp connections
  Version 1.5.0 - 2020-01-14
- bugfix: too late termination of relp Engine on shutdown
- build system fix: invalid default in configure help text
- error message on invalid TLS library request added
  Version 1.4.0 - 2019-03-05
- build system: enable openssl by default, this means both TLS drivers
  are now build by default
- support that both GnuTLS and openssl TLS drivers are active together
- portability: use GCC __attribute__ only where supported
- bugfix: build problem when HAVE_STRERROR_R is undefined
- bugfix: openssl driver did not properly handle retries when sending
- bugfix: in openssl mode, cert name validation did not work properly
- bugfix: invalid handling of connection fail could lead to abort
- a couple of minor and cosmetic nitfixes, improvements and cleanup
  Version 1.3.0 - 2018-12-11
- improved error reporting
- bugfix openssl: anon mode did not work with openssl 1.1.0+
- bugfix: do not send multiple open commands
  Version 1.2.18 - 2018-09-18
- added non-standard "certvalid" auth mode to TLS authentication
- bugfix CI: make distcheck did not work
  Version 1.2.17 - 2018-08-02
- added support for openssl
- improve code quality: replace strerror() by portable equivalent
- improve error message on connection failure
- bugfix: 100% CPU utilization due to busy loop
- bugfix: do not expose symbols that are not part of public API
- bugfix: potential segfault when listener could not be bound
  Version 1.2.16 - 2018-05-14
- API changes
  * add new API: relpSrvSetOversizeMode()
  * add new API: relpSrvSetLstnAddr()
- support additional hashes for fingerprint mode
- bugfix: potential memory leak
- bugfix: memory leak on protocol error
- fixed a couple of minor issues:
  * fix memory leak when relp frame construction fails
  * removed unnecessary code
  * fix memory leak
  * fix memory leak on relpSrvRun() error
  * fix memory leak on relp listener construction error
  * also resolved all other issues reported by Coverity scan</changelog>
</package>
<package pkgid="6d2727833f1351bca839b2f53b61b21f5037c8cbfac93b42b8161ac6ab580e96" name="libsnapper-devel" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="86b344c277b0b398b1c49b7be9279161a339a5e7729173ed892d9bfcc476d458" name="libsnapper-devel" arch="ppc64le">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="3fad9673af5ccc5185f6f77f94c88361e9fab8b11f25f3317d7772c4d8bb1495" name="libsnapper-devel" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="77c7e8e419b74ee0e4c4f327ab8583f71750055e3c085dab131a32b730df7070" name="libsnapper-devel" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="2d2aa2867710b163cc30d88bcf6ab8100084ec76553f52f8a97225db1c4dfb9b" name="libsnapper5" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="b38c87f00730cc450984c81c587c178949bc98aab52dc7fc9d0d8dff8b59d725" name="libsnapper5" arch="ppc64le">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="f70601d0c885004b9dfc35ea748cb8c2103e3b8798adfc3be1d511d080adecc1" name="libsnapper5" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="b8a8130e70ae5caa1ac186af6e6760de05437221799cc23820196ee29dc1a1f1" name="libsnapper5" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="f412f7242f97835b4542b01cea6df1b4af2adaa213e53cdb0687359f19d191b9" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="a801bfc81e357c770141cc06b58d8221a66a86eea75725f44bed5f9cb96fa3db" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="539178b3a1abef5342c0165b67eb6dc130fb8075bbb885e682311e828d3ff3dc" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="832a767f88692ffe006c88ea839e9d64ddf9fc0e8274199914a70ed3dd9c9121" name="libsolv-demo" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="392576d0d0cbacffb53b346072a08716d2712dfd835e8a36edea473260275e44" name="libsolv-demo" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="1e79046ab2986608576b1523f9666830dab025c09b16a1b443a730bdff24309e" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="58cea962f64d2dd1f84259a926703d53b0cf6077134992ce24450ad825b2cb28" name="libsolv-demo" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="06956480d7b88fb2c1ab19d30f5b9596a759f60a333da999146a587c0edd093e" name="libsolv-demo" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="609bf14d8eef47c72f715ab739d2c76c52533dda2d9e56d701d641c823c2d26c" name="libsolv-demo" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="d4b627f65f74b219f1d5e70fce095ea589f0cd4254cd3ce4af6eb68970660dd4" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="ddd90c80873f270d09d60776a671090e95df25a7fc82641ccf8daa73dd75cff5" name="libsolv-devel" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="8d235e5172f24058b8ddeeda66f9695930cbb5f77b8bdab8c3b0c3430107e824" name="libsolv-devel" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="0b485cbdffacd6e7903e6929240fe936530bce29a56d8dabb8288762f82ea68d" name="libsolv-devel" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="f64ea0ec223288a6a8f39b2dc18b6d38768bbd624cd216bbfabb1652f98425f5" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="ce69d3f1a47e98459b2a5529ca4b5bf449bdc2d5b88af81471e67c5e072aa3cc" name="libsolv-devel" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="638cd18d0a318711348d7e0e46cdef90fc21b43bc62d63b74246861c153ffa3e" name="libsolv-devel" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="121203ac6d409bc5286598f5b25794e78021d576a5a387b0c5d3de2f0c7633c6" name="libsolv-devel" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="ee67601f1280b90d8e3c085e9e3ca8187639489ccd6cdb98c2e921646ed85beb" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="d2e7e89c6e6cb80b789eda59041bebef3b00a8f22463d8e4bfc0329a2608a028" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="d05608e8ace92f76c0e00041bfc10dbdb91684bc8037df4184ba05d949c1ac76" name="libsolv-tools" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="8802942eba908792ff54d4d280c75060c0f7b0e4aab2022a6edeead43e135ca0" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="f85c7e284958c305634a6f5cae0c354def2fcd4c34ae0c5e0d24e9cbe7ee8a3e" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="2e960c5180c452e93fa8750f783f68bccbcc78ac4047a325cf1a2d0b04efa87e" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="02511d90a6ee7968ee3f77d6c5a4ad0786012685fdf86551fa8ecac7574545e7" name="libsolv-tools" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="51d22ccd6f5c3ac9bfa5e4ad4c12b34f37617bbc9a707494fec2187e4cd8fdc0" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="10b19f5c0818eca003b01c9d33294184c00ded8caa50b7163ceebd32cc7ab175" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="5b1ea8b0f9c800cc556ffa98b89d89f7a9949abc56098e88d17b7f3467da2bbc" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="17dda2fe9e5b657ea557b4f5e231c2b3fda14c470c0249d351a3432d4ea9031c" name="libstdc++6" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8822083bdcf1810d65c65a45f5296e9d070fde90183acdcf0a98407e8f2d61ef" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="01ec7dfd8e0a34fb09dde713a9f458a6fe998729b9188777b19bb9b4791099f1" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9f80142d78d643d61e07cc2000d03e67db726512fc6568a3e35ad9bfc1c30998" name="libstdc++6-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="f18d75301735ad0a63e143681515e0577b2e3c6dcac3dd2a525ea610dbaffbea" name="libstdc++6-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a9efc3b3d98c905d9065c9d4258f97a8a00815da47d145b178840f3b235254f4" name="libstdc++6-devel-gcc12" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a3457d9dfdc546696f1ef831366cb1b8b0a63a5bda4c092736a0954e3cd81520" name="libstdc++6-devel-gcc12" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="12420551a77ed985825912efd28744e8f6da675533511a2514c0ace6a3da213b" name="libstdc++6-devel-gcc12" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="fab098ff0b1fb5284da39c76d4a4609c794e832f99199cda0368e6d9271370ca" name="libstdc++6-devel-gcc12" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="6d041f1c5f3957ffe0d333747fe368a065cd0aee77d0c28fa8c9ff6f79a7f109" name="libstdc++6-devel-gcc12-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="ef97f4b356dfbb303524158ad67e66771c14345813adbe2867feeadccf755222" name="libstdc++6-devel-gcc12-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c3254d81d27adb885d7061d910e30b4218c9895672f3a3f4ac464263031d2a65" name="libstdc++6-locale" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5668631c0047abcfc4d0ab134d9d67aedae63ddf3d0cebe6fcb8b86ed425adfc" name="libstdc++6-locale" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="17190126b422b3e0520d236ae4a61a75308d6b4fc3c413bf92c9add025a9c5cf" name="libstdc++6-locale" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5820588f4a02e25e39088e786facaa4e1c05e26310df2f82f739530db0df973a" name="libstdc++6-locale" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b1ad90cd3e361f2664c1a28fbf3644f2755c23dbe948b596c037a81528af2157" name="libstdc++6-pp" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="db8023910c16c7cacfc41cb802681617a87438d0847bb43484d5f8b520fbd313" name="libstdc++6-pp" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="3406f99710bcb59abbb17d0ed7f2dcd2ae2cefe215ea928c188e900c07fc2cfc" name="libstdc++6-pp" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="bcf58a53169736bf9d33c8b8a3769fa09879079372acb64f3e915d64a5e2cf36" name="libstdc++6-pp" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="c0c28b6a51204856152a82d1395cf9570fc91d76d2b591c1299be49cb1994e68" name="libstdc++6-pp-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8c192a983fcd27788dbc890fd2bec52f7263a6b45f4a2121ffe8eea4b5ed733e" name="libstdc++6-pp-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dd7870531229aff557506426d3a271a7141cb0c07c775dce16d35643b3c5160a" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="0f6170d3792292c8e75d5cad7930dad0875672538256bd178a33720125050da4" name="libsystemd0" arch="ppc64le">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="560b5bae3243799d99eaf77b26e630a4d2010388dc3850a5881923dc2412ac90" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="0b3554664d871a09c45674da9513c468be4744f719216fd3b788d1642be66821" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="238a3f954eb79c69f00010bb843fc4762758253d9b24f5121f6db9b7b95481a5" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="e41742a9ee32cbdc6644a07eeb715fbeb602e82ed9714aebd8fcfcc5d85d8cba" name="libtiff-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="06cf6b86faa4ba9056fa6d13f258d07059b65c1caa100df31c15257651aa9784" name="libtiff-devel" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="d9df753c76c3473c4e3b78f1337158e8d29ca3ce327343a173fbc9e3cc5f5aa7" name="libtiff-devel" arch="ppc64le">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="58811326a29c77c2fc89e7f1d844c59a1c900fcaa452fc4ba3f494c106a87c1f" name="libtiff-devel" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="1dc6b38162f4344ce8eb66bf0ec51759035a106001946fabe342eb29a3ae006f" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="238f665bae86cdc52b8d64a939f5a59ac0233366e2559c3a39103943a13ecb58" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="ca2b7a2b635686e70f9b3f3fe61c762c3fbbdce21c8985da9c094b264df48a94" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="492f1ca45efc233bb6263f04dfe85f9c9612bf612a6a003ba3738f5a80d0722b" name="libtiff5" arch="ppc64le">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="320e030ae83cd2f5fad7d6a9e5a09d061b83e630b093e420f3125d81a3756a58" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="228558555f1ace0f24049bfdf1425b17d7128a576ff4a9c4848fc2c6045a605b" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="2a528c3eab58beaca18bd0d616fa3294a0a0aed1dce2db7b37fc7fc4efe6270f" name="libtsan2" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="566f03363efdedafd4168e1dc3981ae0b68e26014a2f8eec32697a7349a8c02a" name="libtsan2" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="18642bc880fff0f65012f174a3ac26e4cecac5a3e109850dfa7bab46f0cf6077" name="libtsan2" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="9b2bb989af0b625f875c7c47a411a48f9e253a2217174a46f02bf155ec4d1679" name="libtsan2" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8f3578cf0a217a0e7cdf2f216921efb6018da07ccc5a59f67a64e03e798f6204" name="libubsan1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="23dc7e5cbac34ac393521608b6786c16cb6a983018b64f5b6e5f3c1189ad1fd5" name="libubsan1" arch="ppc64le">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="084401fdb67fbd7c280f620c8714db4244e6cafb1d0aa84473ec4e4acea81c6c" name="libubsan1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="270e5b9b8b905b8eefbca55e263f713313c49c2ad93d9505b85245f4916f0986" name="libubsan1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="5eb3f1ff43aa821061b5cfd059bae736b05ab0d075084825f7c34328b7183184" name="libubsan1-32bit" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="a54226bbda0b86dcd2a113a4b439ecce98815a715432bcf3bea4fdbef2e8cc25" name="libubsan1-32bit" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="cc5d5dc44076c35f736a4b6c3281d9b6d124721fdaca0b38a85378e999ccb115" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="920abf9848566bf276e5d2dbcf077ccf30a5cfe880678423979723013f01c1e9" name="libudev1" arch="ppc64le">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="9cf616608db09497d2bdfd9fdeaa8aab51b3e9066a77c4449449af951f88b1e3" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="11b947f50aaecf5cb4e0f3518cc7746629fcc5c4761ded51970cf6953e40c619" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="4fad6b9ef4ea001d07f3e05b576d2796912817e0d18bfbdc0678f88156d9f9c1" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="a653834b93761e267bd1b13c87710ded921dd9dfcb372675430ccfceaa5518f3" name="libvirt" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="d02d64aa7e9ecca367b6209e9891be7964a2eb1c611b0de52d1c2b60ebb34eb2" name="libvirt" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="dd45e9a77ca209983f1a22857848213a4d9d61b261ea473d96580323b4fdfd0f" name="libvirt" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="76400444a7aa6bd393aed0534e8fa7a5bed1eaac6fdbb235d04924b7de72332b" name="libvirt" arch="src">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="ede9f2950edb7d7aaeeaa4f5404bc8ee3a62b1c63a9390211502d6aab193e65f" name="libvirt" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="62f7bc0f9d41ef8fe1399772bc42b6153eab7d6e4ef900ede4ee1b686a16d0da" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="562cafb69c55fce67f0b0fc23a29a2474b523cfc770dfa270040e0166a2aa634" name="libvirt-client" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="1dc189623370049503ed39a05cc2e8ab13838b80ac5627aa779758a3ffb9f5f5" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="161d7c7e37b6dfb1c3a6c8becaf316df9a70bee805fc309a94cb2f432eebf1ba" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="61ef441b24da5ed6653b13379c63e48d468a89c5e47d902fad17e55415261f98" name="libvirt-client-qemu" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="1ad5f2c158ee8e2e212c459b73997ec92ecd12f1eeeff4972bead152646a16f5" name="libvirt-client-qemu" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="3b9ee48d02bef348ae7b095998f27cc48af5974d793f9859d7f21a5b9ac67a3f" name="libvirt-client-qemu" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="f91c27c7ab6b0866faf65cc78ad97771de4abc78e7effce579a6558488069cf4" name="libvirt-client-qemu" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="79a6ec5350d4dbc1a5d63b6472fdadf37ed45cbeab6ae5f3077be10297e33bdd" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="3d0694f01e4cabe6cc05033920e6034dfa30aafe4601ea74480d55ce32d5455e" name="libvirt-daemon" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="318c2cdcb3b79fc2a70dea5d518cf4a1535dc3f2b297ba0c83b5425cb8f07926" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="4b7d33fef9cf611387f714187777a53ba3a2fd527d276591527b6dfebf7c4851" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="27a3e172369101a9246fff869182792e1a9581a0f74f92cd697d0685f1a24a32" name="libvirt-daemon-config-network" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="71f2694a97d863c528092dda95a6fecb4e70ac74830112d612cf2060d4e38094" name="libvirt-daemon-config-network" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="9d107bb2720fa56182e2d17ac1836768a7e58e73fd6107f7944ca46758f115a9" name="libvirt-daemon-config-network" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="7653d6f2f791bcf5dcd603a5e404e20d831c5076a143ff8f069a25b061abec02" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="67a166d9ec6a7575f11724bf0488c48ea6913eb7140d37c794050cac76fe1181" name="libvirt-daemon-config-nwfilter" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="3eebb7aca81ddf38b30de5d1bda018589294023378f554d2e35d1cdada551aea" name="libvirt-daemon-config-nwfilter" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="4e5f841384683a7113dcb12ae27fbc978abcf42843db0e4df88484b13fd318a9" name="libvirt-daemon-config-nwfilter" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="8e047818c79cb5eb3ce2617e41af7ce0f83b0723b35a62499c846328e3dd9610" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="05188828084de2fff561ea82639f25bb44c4a0fa2fb5c1825309b4678e0227ed" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="22b656719d8cd78af4ae3be8a9e52dc245747ac637b2a845fa59987bab19c7c8" name="libvirt-daemon-driver-interface" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="6fc2df45e58b4745da19260c82a1668dedd9cf175f741ebbfbd1a91a67af6c13" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="6ba904cfa6292a94e6836acce27f6ea8000dca82007f3a50a57ecbc76f923f7d" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="57c06873adfe7e15d60ee3f0f644853442fdf9afb0f6463589328af6c3c9fd10" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="46a0e24f6f85009864aca2b3d68dab1f6920a10a3e5d30d0ef984b98093ebaf2" name="libvirt-daemon-driver-lxc" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e327cb672e2e45f98e6ceef4d41e7be20cc3e0748b991699af4afb68dc658510" name="libvirt-daemon-driver-lxc" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="470db11cc81a7f82d2ea10e94a5e64c99f641b52cda4845b947d39b72d2a05d5" name="libvirt-daemon-driver-lxc" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="586a8b0ad10628e5f8e14e811782f48b882a794f9a7027cd9ac0de5dc5548485" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="bff6fb7881d5e489463758d37de8ef50c7bc9ce58c851b72f1752aff88538142" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="d5341657dd0e8f79f3113c8d4b97956bf11fd4060637d0ca28b4bc9f8178aeea" name="libvirt-daemon-driver-network" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="9e94492137d801b6a78ce960670e476324150f9dd2d60ccc01a7dff62eb7fd8b" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="a4dd6efaad06fd8404ae1f81917e5cf262f4019b7f5f1d20df78b62440bd0557" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="09f57122a43cd05c59232c9588e2a99109a2cba7634b2f415a8763aab007390f" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="7083683722d4094a8ab85fa4654cd59f7b8c24052b2f74e422b2ff09d47e73d0" name="libvirt-daemon-driver-nodedev" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="9ebd84246b4d3cf403dec34b2b0089faa6c13a71ac69a9dd29c265ac5183bc5b" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="cba6f3ba8dc276663cc0586d3fb29e112d3ebca1c6d916f10c37de419ea492b1" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="2d419fa72e9c3e82c8c0e98bd11f61ef61b9e5ca79b3036b24aa3ca80e093fca" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="14894c82cdae98b2f510ae15bb820664c40e2292379abf7ca0d077bc54d3ef19" name="libvirt-daemon-driver-nwfilter" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="2acf33089f536dc8f535b502c6631596282f2dfcaca177d5f9a5858664223026" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="0a5d542db239755cfd7c653fd5b05f77a285aef19361ebc3d75ddf0a04756c3e" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="fd1b58fddbe309699239e479f7940d98224ea96b47c640b1ec8fdd813f10488f" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="75762f498964eb2b5c24ed0630043e23da67bd728974280a21b20e7582557b4b" name="libvirt-daemon-driver-qemu" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="bceb2c5c0cd919dcc7f6ee50fce809b028191f8bea6023256bcb66e4ef7ae5f1" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e7cffe947b6374f4e049b9363df83950f79d8971f62e0e13a3ed23f7d4e36f3e" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="8da177c64caae37e8e1a9a4237ed2f2844145e48fa1604c6f747c58f953232a4" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="c0adc16a30d521ff6d5ddae2657e25da922d664bd202ee23479c8d818b7ce835" name="libvirt-daemon-driver-secret" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="7f769b6aacff3d0c27151a98032e452992a7b476738954dac1332e6eb3f71a92" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="4a43e465bba9905a2abe35a9852ced973f12ac5853361bd0df931331cc92817f" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="ad7ffb8ea34f030d29e8ee8fea092b241e99994da8d90dc26bef667bb5e5ceac" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="71706a6d578480f629d8e3a4161570f07c64e3dce9b88bcd23ce853eca14aa11" name="libvirt-daemon-driver-storage" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="1bfa80d51e41d0631d0d231f6ef37a2c027a632d755e1f1f2029bc6f8da1f782" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="4c44d1425495a1184e689e473068f8b97e7c0b7d6655665297e6fad840d1b0f4" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="0fb173fbe161c1416b9f97b9abbd8720bf101cf39ff81bcc9aed9a82dd809c6d" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="9b05fc933362bf9413bf0c064365a4686a7055df830994067c6314a312b96859" name="libvirt-daemon-driver-storage-core" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="cfe7f08280e3cfd7bdf8351c39819a09df4f60204789a026c76600c5c949f857" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="c7cefc249bfd238c95b17503eea7c9cfa9ff2b3bb45a0e9c3a97256ad2993b7a" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="5f5f3f531a0f941b2c2ac70f88f4ae0839ba4177761ecb62bfa76d9d9ed97c67" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="acc2b2941b6c1829d53e389bb2231326caef1d8ae337199943d920792ada5c61" name="libvirt-daemon-driver-storage-disk" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="f6704b554eb58ef96b3ef3c92dd39828624a50d46d3702bfa7d454ad33f92843" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="82857c73aaa69dc8858470395578717ec111ca93dc6d894de7f7ce1167bd212b" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="2158a3ed059b865794a7bd184cd3f3e01dfec5eb99274c7ae88fa92235617cfb" name="libvirt-daemon-driver-storage-gluster" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="5ee8bd3b805ba909e31c2437a59b2f1e38c523f4ceab19bf6bf794bc7053a0c9" name="libvirt-daemon-driver-storage-gluster" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="bbd6d25afe3c6b4b42cce1beabfab6e5dd156becad61ce8524e6651d4e94c1a8" name="libvirt-daemon-driver-storage-gluster" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="b0f793eafbd7bb4f52d017a881d9a049f54ead444dfd782e2a47e512d12b9728" name="libvirt-daemon-driver-storage-gluster" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="adcc3d6a088a2dfd7fca663df755264299a3b0039d12dee1dd4374f184b852c6" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="ac3a761a3b34865304fcfd715848ab38313a6d8d1307bd47fdae7ac111493e21" name="libvirt-daemon-driver-storage-iscsi" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="92efc304b6f6c4f203e0614ae0f4cfbf0b18a669867532d8482e0f79190ecf88" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e8f28596972cec611e7ab65dcf937a8fbedca7f8cdf29c023191079b361bbe5c" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="c23ff2671dafb742e830ed75c2f181f410ee4790c1fbda2940031481180d048c" name="libvirt-daemon-driver-storage-iscsi-direct" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="a70a969963c16d6d860e4cb5ab6980209d20de2998b6d9fda0fd0203191142b6" name="libvirt-daemon-driver-storage-iscsi-direct" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="bc19cc43751aecab55ecfd6a6fea99d1c92c7c40bf013a75c505fa24455f1795" name="libvirt-daemon-driver-storage-iscsi-direct" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e585692953cf1eb9261ea98101c709c8f066a4fb356c6b75a6ad93c7005a68f5" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="cb5ec988bbd4ae43e0abe544534b105354c646ca60da32bfb2bd6c4a97c88cc7" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="cedca612fcc0a9451456fdf2d50c98a9347403319c4eb753a1e9295e02579d77" name="libvirt-daemon-driver-storage-logical" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e6cc2d939c3315aa40a2cf246d6fa0722c3982123487c225399a0ebfc211be5a" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="7877b37664cb6b903945c5febf7917ce8f2a740e1409d123989d4b1c4b99a616" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e86889313263abe62bc90cabb0424ffbd25331ffbd75a6b2e53ed5ad2bdad20c" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="7a33b3270aeb7bda4e5284c1136fe0be3af0baa606e9d95d87cf74a1f7833fca" name="libvirt-daemon-driver-storage-mpath" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="2efd2fd2e543a5bdd70429c77b0656de44f58a917ae05d757dba3e023eaad8d9" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="dc7d850c5a15fa95638d21a0838d34ef3d8d1386d216b259e91e592d877e5366" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="f5c3d404587881270db537c97ae6fe7d7146dfe9412956d62aa2049ed7ef0665" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="22ab8300b8f3bc238ea087d277377b2a49922aaf0c707869ca35cafc6ba0a930" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="f024b91565674de94a20f1cf234ea2b0284bc8a71fb4f5255ba0913372e30e31" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="09c4e7a32fa5553dec6fb636607bdee6c011ecee05d2fe3414df9b0d5355d553" name="libvirt-daemon-driver-storage-scsi" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="ae64f867b89f8283d5914e48edd67cc84a273f7fc985e5c61f2c8b84d86e89a1" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="9991e476789149261667dc9ba7cb35412ba5b0a474c6d8a8ab0ce0c7ae79e2f0" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="62143233a528fea14186f0909d5163c562e4b1587df874102ff572464f86e384" name="libvirt-daemon-hooks" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="d059816fe1324a953898a7b0502c3dc74f17d6ddbf89277efa85eac9c0852e03" name="libvirt-daemon-hooks" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="6ce677dbd47afad7c1ed6bcb1f13575b92bc99117fad78bc3a1dbb458236c33b" name="libvirt-daemon-hooks" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="bf9d0b793dfbda959ad9956fad3e8e87dc3f3fd16c6650154c69932bcda9e8dc" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="cbbe4dc92bc14de052a5af02a442cb8908572c272753f971a3fe7d53d44be4a5" name="libvirt-daemon-lxc" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="183c5f46456d4a92d32af0bdc40df82b00f2a643fc7c32172b743fc691e2934b" name="libvirt-daemon-lxc" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e4bbbbfbf131abfc02cb3bff5f6b4cf462124be2f4e8bfd081e7daf17247e124" name="libvirt-daemon-lxc" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="04b8ee9af61822b788809bac6c00249b44f1d2308ca8b4eba105730e24e7748d" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="426e1e463cf136841ef454d7c5d87372bdc599e55dc90a943873af5609056167" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="b09907464d1ba795b0db1834ededbc1e9f53798562ca7d471676a80b3d06a2b2" name="libvirt-daemon-qemu" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="bc9005149045e7ab102f7d06f02a3f10c7e0646fff2c727dfa634d10e80ce3d1" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="11a9a6cc50ae190fde2c44d5bfc7f4d03fdfec2baf3cc610f9dab339a7a97cbd" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="5e76cf686f46ab3d07fce7138da409b41e9a5b29f37fd606bb08d0e3a9a2134a" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="2f31026c88ed2496c35f0531e4d49a7a193c0d797fbbf433441f8dcabe894d2d" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="4e36d69a7349a09f5a424e7f3a1753715b8d1cc0f5e98b81457f518e60139338" name="libvirt-devel" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="ee64cbda56bddb13ab556524478f83a4b29b0ac2aa595a5e59f6a262ce1b2289" name="libvirt-devel" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="d68b9042ea65e03f6b8b3fcda901972a72d9b6e055d1575eeda658b0432a855c" name="libvirt-devel" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="5f4939d1a7c14a3f3c694aef314276724e02557601747a8532babb8a3561e6e7" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="c19dc8e218e35f206200fb06e793df41cb1624e1b4c38987851db15a746c9349" name="libvirt-doc" arch="noarch">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="eae9deee53e0be0913fe6d3c69aedba2a9901057b5269abfb5e2e16a5aa08945" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="528080e30e824222d13a4b770606bd23cfd4f44e31ff3cec2be1d869fdbb2392" name="libvirt-libs" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="33f160cd97003a2f828fda73ccf2a5bad7fe39eea83a2cd547eeb0e4668e983d" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="6592fdc2204db5c9a08f01bd52063f5aae43bbe37427a0a9eac454364a393b33" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="94a9c8d865086b4ece8a5632e7dd4667d40084109261dd257d8cef5bf39d1be9" name="libvirt-lock-sanlock" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="2e6c45ffddd1f8e3f344f66d20e44d87c46e4715a70101aa1221a279dcf80e86" name="libvirt-lock-sanlock" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="6d2b323ba154297be24b8fd252722643bfdd4120e966c7f8f9d8ea606a6c5bdd" name="libvirt-lock-sanlock" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e7d45b17ab1beeca44d7408ecea1317a35d85c2adbbff8c45b5fe260f73aee2e" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="070a02c93cb3eda35b89ef58b9d38e776b617faa10431614892c6ce1ebef310a" name="libvirt-nss" arch="aarch64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="7c6c95b7c3e2f907e636f4b4581eb80bdbdf254f8c8387eb8043bc333db98f13" name="libvirt-nss" arch="ppc64le">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="e6fefd08805fd11c3763d16a875344ab14344ace879cbd51c4809d34bd9fbc12" name="libvirt-nss" arch="s390x">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="8939c1d9c336bbc22eaf57928e8d9aba334ee0f9434689eb8a2c93176fc06842" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="9.0.0" rel="150500.6.3.1"/>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1662033601">- Update to libvirt 8.7.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-7-0-2022-09-01
  - Dropped patches:
    3be5ba11-libvirt-guests-install.patch,
    16172741-libvirt-guests-manpage.patch,
    8eb44616-remove-sysconfig-files.patch,
    31e937fb-libxl-save-lock-indicator.patch,
    105dace2-revert-virProcessGetStatInfo.patch,
    e0241f33-libxl-mark-allocated-graphics-ports.patch,
    18ec405a-libxl-release-graphics-ports.patch,
    76deb656-qemu-fix-snapshot-revert.patch,
    454b927d-libxl-fix-dom-restore.patch,
    d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
    07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
    29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
    82be0ffe-conf-validate-serial-port-model.patch,
    aab943a6-support-firmware-debug.patch,
    7714034e-qemu-debug-console-tests.patch,
    3ef9b51b-qemu-fix-pflash-formatting.patch,
    5adfb347-qemu-honor-user-nvram-path.patch,
    08101bde-qemu-inline-nvram-path-code.patch,
    24adb6c7-qemu-dont-regen-nvram-path.patch,
    392292cd-tests-dont-use-autogen-nvram-path.patch,
    32b9d8b0-qemu-support-fw-descriptor-mode.patch,
    823a62ec-qemu-fix-undefine-crash.patch,
    a4947e8f-nwfilter-CVE-2022-0897.patch,
    c61d1e9b-virfile-set-pipe-size.patch,
    47d6d185-virfile-fix-indent.patch,
    cd7acb33-virfile-report-error.patch,
    ba7f9812-conf-intro-mem-alloc-threads.patch,
    a30dac15-qemu-detect-prealloc-threads.patch,
    75a4e016-qemu-validate-prealloc-threads.patch,
    b8d6ecc7-qemu-generate-prealloc-threads.patch,
    c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
    0a301b19-qemu-dont-assume-qemukvm.patch,
    fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch,
    db0564b4-vmx-Require-networkName.patch,
    0001-Extract-stats-functions-from-the-qemu-driver.patch,
    0002-lxc-implement-connectGetAllDomainStats.patch
- spec: Place 'Requires:' on compression binaries instead of their
  associated packages
  boo#1202569
- spec: Don't redefine libexecdir
  boo#1201565
- spec: Closer alignment with upstream spec file, including
  enabling more unit tests</changelog>
  <changelog author="schubi@suse.com" date="1663243200">- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.</changelog>
  <changelog author="jfehlig@suse.com" date="1664280000">- spec: Only drop redefinition of libexecdir on Factory and newer
  bsc#1203775</changelog>
  <changelog author="jfehlig@suse.com" date="1664971200">- Update to libvirt 8.8.0
  - jsc#PED-620, jsc#PED-1540
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-8-0-2022-10-03
- spec: Switch from monolithic to modular daemons for Factory</changelog>
  <changelog author="jfehlig@suse.com" date="1667304000">- Update to libvirt 8.9.0
  - jsc#PED-620, jsc#PED-1540
  - Add support for modular daemons to the supportconfig plugin
  - New subpackage libvirt-client-qemu providing client utilities
    to interact with QEMU-specific features of libvirt
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-9-0-2022-11-01</changelog>
  <changelog author="jfehlig@suse.com" date="1668168000">- tests: Fix libxlxml2domconfigtest
  f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch
  bsc#1205204</changelog>
  <changelog author="jfehlig@suse.com" date="1669896000">- Update to libvirt 8.10.0
  - jsc#PED-1472
  - New virt-qemu-sev-validate utility for validating the
    measurement reported for a domain launched with AMD SEV
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v8-10-0-2022-12-01
  - Dropped patches:
    f81ee7b5-tests-Fix-libxlxml2domconfigtest.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1673956800">- Update to libvirt 9.0.0
  - jsc#PED-620
  - Many incremental improvements and bug fixes, see
    https://libvirt.org/news.html#v9-0-0-2023-01-16
  - Added patches:
    ef482951-apparmor-Allow-umount-dev.patch,
    d6a8b9ee-qemu-Fix-managed-no-when-creating-ethdev.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1675857600">- qemu: Fix umount of /dev in VM private namespace
  c3f16cea-qemu-cleanup-label-on-umount-failure.patch,
  697c16e3-qemu_process-better-debug-message.patch,
  5155ab4b-qemu_namespace-nested-mounts-when-umount.patch
  boo#1207889</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1677844800">- tools: Fix detection of remote libvirt access in
  virt-qemu-sev-validate
  0f350a4d-virt-qemu-sev-validate-remote-detect.patch
  jsc#PED-1472</changelog>
  <changelog author="jfehlig@suse.com" date="1678449600">- libxl: Support custom firmware paths
  bf3be5b7-libxl-Support-custom-firmware-path.patch,
  705525cb-libxl-Support-custom-firmware-path-conversion.patch
  bsc#1209161
- spec: Move ovmf dependency to correct package</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1683633600">- qemu: Fix cdrom media change
  86cfe93e-qemuProcessRefreshDisks-fix-info.patch
  bsc#1210666</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1686139200">- spec: Replace /etc/apparmor.d/&lt;libvirt-profile&gt; on package upgrade
  apparmor: Add support for local profile customizations
  9b743ee1-apparmor-support-local-profile-customizations.patch
  bsc#1211472</changelog>
</package>
<package pkgid="473c2f810a0cf6add7933adc21e74a303cd5bfb8ad57c0f39e3c6db8b2bbbe96" name="libvmtools-devel" arch="aarch64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="93933a11c715b4b1eba8fab8a5667efe22783e801a24d70b9b24406c70ea97f4" name="libvmtools-devel" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="a10072173184b0ad081a9c1f1ca3c436c741c4f154c00bb853cc507bb665c3ac" name="libvmtools0" arch="aarch64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="feeecc23452cb516e0003738a22f98544f8279e4ec2265b296d1798a5caa6623" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="2cbb3ba2a92e9e775844ea27c1c5a9faa6fdf116a10e5ae0e519de54df744501" name="libwebkit2gtk-4_0-37" arch="aarch64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="665800d3937a61212ea85e07f68407136048afe71ffd4bf1be5d97be54ce5311" name="libwebkit2gtk-4_0-37" arch="ppc64le">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="de6e5894aa7e2b720f6b32b5d92ee5742e7b164d2d372be56655cf6ab91c00d9" name="libwebkit2gtk-4_0-37" arch="s390x">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="c39238906287cd6d6582f232a9168a3ed11fd84f3b1b95b0b7f4344a6bde23d7" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="3e5d32ed8a61816fb3df9bd4c919e1882aa7a7ffa69bbb58f0f7da321af99a77" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="ce36c385a7ee47d7b8f7438d5de5ec63b3dabb581402a0b0febc3146861c096b" name="libwebkit2gtk-4_1-0" arch="aarch64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="1ce9fc9a3adda4601a18dddbc1540714552ec263890846fca4ad262228bfb4c0" name="libwebkit2gtk-4_1-0" arch="ppc64le">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="e80bb7d3fa70c23795c092b33e5c9fe4e453b724f68aa69e88066c8b88e4800c" name="libwebkit2gtk-4_1-0" arch="s390x">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="07ccc652f82c2467dac36ef3bb0ce593b9485620d2412af24fc8a73fb130c5b6" name="libwebkit2gtk-4_1-0" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="17f330d4d4576cf29c3e3f021bab28b8102d370dc8506208cd66dd9fb552cf2b" name="libwebkit2gtk-4_1-0-32bit" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="33d74ef4f379436134936ff8f24ac75d8e9a262a9ffdff9f7ed8b03c99545e6a" name="libwebkit2gtk-5_0-0" arch="aarch64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="0083a9d40f784e7f4e8e70f13e1a644f91cd793ffa59c68259b9bb74a71a592c" name="libwebkit2gtk-5_0-0" arch="ppc64le">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="b8aa6b9cfe66d96c2247bb8df6e6071787249523426d0eba9664a3b98dc98b92" name="libwebkit2gtk-5_0-0" arch="s390x">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="7cbd87ed1ce25d903ca80fb850a447e424da4891a6f90b385f3850b82b5982a4" name="libwebkit2gtk-5_0-0" arch="x86_64">
  <version epoch="0" ver="2.38.6" rel="150400.4.42.4"/>
  <changelog author="mgorse@suse.com" date="1644408000">- Update to version 2.34.5 (boo#1195735):
  + Improve VP8 codec selection when using GStreamer 1.20.
  + Fix connecting to the accessiblity bus when using the
    Bubblewrap sandbox.
  + Fix links being incorrectly activated when starting a pinch
    zoom gesture.
  + Fix touch-based scrolling.
  + Fix the build with recent toolchains based on GCC 12 and on
    older ones as included e.g. in Ubuntu 18.04.
  + Fix the build with ICU 60, version 61 is no longer required.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22589, CVE-2022-22590, CVE-2022-22592,.
  + Drop webkit2gtk3-gcc12.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1645099200">- Update to version 2.34.6 (boo#1196133):
  + Fix accessibility not working when the Bubblewrap sandbox is
    enabled.
  + Fix rendering of scrollbars when overlay scrollbars are
    disabled.
  + Fix the build when the X11 support is disabled.
  + Fix the build in a number of situations where the main OpenGL
    library is not called libGL or libgl, as is the case on
    systems that use libglvnd.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22620.</changelog>
  <changelog author="mgorse@suse.com" date="1649764800">- Update to version 2.36.0 (boo#1198290):
  + Add new accessibility implementation using ATSPI DBus
    interfaces instead of ATK.
  + Add support for requestVideoFrameCallback.
  + Change hardware-acceleration-policy setting default value to
    always.
  + Add support for media session.
  + Add new API to set HTTP response information to custom uri
    schemes.
  + Make user interactive threads (event handler, scrolling, …)
    real time in linux.
  + Security fixes: CVE-2022-22624, CVE-2022-22628, CVE-2022-22629,
    CVE-2022-22662.
- Rebase no-forced-sse.patch.
- Drop fix-warnings.patch and webkit2gtk3-link-fix.patch: fixed upstream.
- Add webkit2gtk3-old-ruby.patch: fix a build failure.</changelog>
  <changelog author="mgorse@suse.com" date="1650628800">- Disable gold linker. It is unmaintained and now disabled on
  factory.
- Switch to gcc 11.
- Increase mem_per_process. Attempt to fix sporadic bild failure
  (bsc#1198743).</changelog>
  <changelog author="mgorse@suse.com" date="1654084800">- Update to version 2.36.1 (boo#1199287):
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-30293.</changelog>
  <changelog author="mgorse@suse.com" date="1654084801">- Update to version 2.36.2:
  + Fix some pages showing empty content boxes when using GTK4.
  + Fix the build with accessibility disabled.
  + Fix the build with newer Ruby versions.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="mgorse@suse.com" date="1654084802">- Update to version 2.36.3 (boo#1200106):
  + Support capturing already encoded video streams, which takes
    advantage of encoding done in hardware by devices which support
    this feature.
  + Avoid using experimental GStreamer elements for video demuxing.
  + Avoid using the legacy GStreamer VA-API decoding plug-ins,
    which often cause rendering issues and are not much maintained.
    Their usage can be re-enabled setting
    WEBKIT_GST_ENABLE_LEGACY_VAAPI=1 in the environment.
  + Fix playback of YouTube streams which use dynamic ad insertion.
  + Fix display capture with Pipewire.
  + Fix the build without the X11 target when X11 headers are not
    present.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-26700, CVE-2022-26709, CVE-2022-26716,
    CVE-2022-26717, CVE-2022-26719.
- Drop webkit2gtk3-old-ruby.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1657022400">- Update to version 2.36.4 (boo#1201221):
  + Fix the new ATSPI accessibility implementation to add the missing
    Collection interface for the loaded document.
  + Fix the MediaSession implementation to make the MPRIS object
    names more sandbox friendly, which plays better with Flatpak
    and WebKit's own Bubblwrap-based sandboxing.
  + Fix leaked Web Processes in some particular situations.
  + Fix the build with media capture support enabled.
  + Fix cross-compilation when targeting 64-bit ARM.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-22677, CVE-2022-26710.
- Add webkit2gtk3-fix-build.patch: fix the build.</changelog>
  <changelog author="mgorse@suse.com" date="1659096000">- Update to version 2.36.5 (boo#1201980):
  + Add support for PAC proxy in the WebDriver implementation.
  + Fix video playback when loaded through custom URIs, this fixes
    video playback in the Yelp documentation browser.
  - Fix WebKitWebView::context-menu when using GTK4.
  - Fix LTO builds with GCC.
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32792, CVE-2022-32816.
- Drop webkit2gtk3-fix-build.patch: fixed upstream.</changelog>
  <changelog author="mgorse@suse.com" date="1661342400">- Update to version 2.36.6
  + Fix handling of touchpad scrolling on GTK4 builds
  + Fix WebKitGTK not allowing to be used from non-main threads
    (boo#1202169)
  + Fix several crashes and rendering issues</changelog>
  <changelog author="mgorse@suse.com" date="1661515200">- Update to version 2.36.7 (boo#1202807):
  - Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32893.</changelog>
  <changelog author="mgorse@suse.com" date="1663588800">- Update to version 2.36.8 (boo#1203530):
  + Fix jumpy elements when scrolling GitLab and other web sites.
  + Fix WebKitWebView:web-process-terminated signal not being
    emitted for the first web view when sandboxing is enabled.
  + Fix hang when opening HTML &lt;select&gt; elements in GTK4 builds.
  + Fix kinetic scrolling with elements that use overflow
    scrolling.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-32886, CVE-2022-32912, CVE-2023-25358,
    CVE-2023-25360, CVE-2023-25361, CVE-2023-25362, CVE-2023-25363.</changelog>
  <changelog author="mgorse@suse.com" date="1667908800">- Update to version 2.38.0 boo#1205121 boo#1205122):
  + New media controls UI style.
  + Add new API to set WebView’s Content-Security-Policy for web
    extensions support.
  + Make it possible to use the remote inspector from other
    browsers using WEBKIT_INSPECTOR_HTTP_SERVER env var.
  + MediaSession is enabled by default, allowing remote media
    control using MPRIS.
  + Add support for PDF documents using PDF.js.
  + Security fixes: CVE-2022-32888, CVE-2022-32923, CVE-2022-42863.</changelog>
  <changelog author="mgorse@suse.com" date="1667908801">- Update to version 2.38.1:
  + Make xdg-dbus-proxy work if host session bus address is an
    abstract socket.
  + Use a single xdg-dbus-proxy process when sandbox is enabled.
  + Fix high resolution video playback due to unimplemented
    changeType operation.
  + Ensure GSubprocess uses posix_spawn() again and inherit file
    descriptors.
  + Fix player stucking in buffering (paused) state for progressive
    streaming.
  + Do not try to preconnect on link click when link preconnect
    setting is disabled.
  + Fix close status code returned when the client closes a
    WebSocket in some cases.
  + Fix media player duration calculation.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-46691.</changelog>
  <changelog author="mgorse@suse.com" date="1667908802">- Update to version 2.38.2 (boo#1205120 boo#1205123 boo#1205124):
  + Fix scrolling issues in some sites having fixed background.
  + Fix prolonged buffering during progressive live playback.
  + Fix the build with accessibility disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42799, CVE-2022-42823, CVE-2022-42824.
- Update no-forced-sse.patch with quilt.
- Pass -DENABLE_DOCUMENTATION=OFF to configure, we did not build
  the API docs in the past, and I see no reason to start now.
- Drop pkgconfig(libnotify) BuildRequires: No longer needed, nor
  used if available.
- Pass -DUSE_SYSTEM_MALLOC=ON on all architectures, to work
  around webkit#243535.</changelog>
  <changelog author="mgorse@suse.com" date="1671710400">- Update to version 2.38.3 (boo#1206474 boo#1206750):
  + Fix runtime critical warnings from media player.
  + Fix network process crash when fetching website data on
    ephemeral session.
  + Fix the build with Ruby 3.2.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-42852, CVE-2022-42856, CVE-2022-42867,
    CVE-2022-46692, CVE-2022-46698, CVE-2022-46699, CVE-2022-46700.</changelog>
  <changelog author="mgorse@suse.com" date="1675771200">- Update to version 2.38.4 (boo#1207997):
  + Improve GStreamer multimedia playback across the board with
    improved codec selection logic, better handling of latency, and
    improving frame discard to avoid audio/video
    desynchronizationg, among other fixes.
  + Disable HLS media playback by default, which makes web sites
    use MSE instead. If needed WEBKIT_GST_ENABLE_HLS_SUPPORT=1 can
    be set in the environment to enable it back.
  + Disable threaded rendering in GTK4 builds by default, as it was
    causing crashes.
  + Fix MediaSession API not showing artwork images.
  + Fix MediaSession MPRIS usage when running inside a Flatpak
    sandbox.
  + Fix input element controls to correctly scale when applying a
    zoom factor different than the default.
  + Fix leakage of Web processes in certain situations.
  + Fix the injected bundle not being found when running inside a
    sandbox.
  + Fix the build with ENABLE_INTROSPECTION when cross-compiling.
  + FIx the build with ENABLE_WEBGL disabled.
  + Fix the build with GStreamer-based WebRTC enabled.
  + Fix the build with USE_GTK4 enabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23517, CVE-2023-23518, CVE-2022-42826.</changelog>
  <changelog author="mgorse@suse.com" date="1676548800">- Update to version 2.38.5 (boo#1208328):
  + Fix large memory allocation when uploading content.
  + Fix scrolling after a history navigation with PSON enabled.
  + Always update the active uri of WebKitFrame.
  + Fix the build on Ubuntu 20.04.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2023-23529.
- Add webkit2gtk3-gtk4-build-fix.patch: fix the build with gtk
  4.6.0.</changelog>
  <changelog author="mgorse@suse.com" date="1682078400">- Update to version 2.38.6 (boo#1210295 boo#1210731):
  + Enable the Asynchronous Clipboard API to make certain pages
    work (e.g. GithHub started recently requiring it).
  + Support :has() CSS selectors in content filters.
  + Apply basic font properties as font variation settings.
  + The Bubblewrap sandbox no longer requires setting an
    application identifier via GApplication to operate correctly.
    Using GApplication is still recommended, but optional.
  + Improvements to the GStreamer multimedia playback, in
    particular around MSE, WebRTC, and seeking.
  + Fix the build with journald support enabled when using elogind
    instead of the systemd libraries.
  + Fix the build with Link-Time Optimization enabled (-flto=auto).
  + Fix context menus not working in the remote Web Inspector.
  + Fix usage of the remote Web Inspector over HTTP.
  + Fix debug logs not being emitted in release builds.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2022-0108, CVE-2023-28205, CVE-2022-32885,
    CVE-2023-27932, CVE-2023-27954.</changelog>
  <changelog author="mgorse@suse.com" date="1686225600">- Add security patches (boo#1211846):
  + webkit2gtk3-CVE-2023-28204.patch (boo#1211659 CVE-2023-28204)
  + webkit2gtk3-CVE-2023-32373.patch (boo#1211658 CVE-2023-32373)</changelog>
</package>
<package pkgid="1b03d97d3503353e9e5c811b4663e75aacbca3a99f785f9df211b3fdce187023" name="libwebp" arch="src">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="jengelh@medozas.de" date="1327924800">- Rename webp-tools to libwebp-tools to follow scheme of other
  lib*-tools packages.</changelog>
  <changelog author="dimstar@opensuse.org" date="1346414400">- Update to version 0.2.0:
  * Add support for ARGB -&gt; YUVA conversion for lossless decoder
  * Add stats for lossless and alpha encoding
  * Security related hardening: allocation and size checks
  * Add PAM output support to dwebp
  * Alpha channel encode/decode support
  * Lossless encoder/decoder
  * Add TIFF input support to cwebp
  * Incompatible changes:
  - The encode ABI has been modified to support alpha encoding
  - Deprecated function WebPINew() has been removed
  - Decode function signatures have changed to consistently use
    size_t over int/uint32_t
  - decode_vp8.h is no longer installed system-wide
  - cwebp will encode the alpha channel if present.
  * Add libtiff-devel BuildRequires for the new tiff input support.
  * Rename libwebp2 subpackage to libwebp4 (by changing lname
  defines), following upstreams soname bump (incl. baselibs.conf).
  * No reason to run autogen</changelog>
  <changelog author="mailaender@opensuse.org" date="1355054400">- Update to version 0.2.1
  * libwebp: validate chunk size in ParseOptionalChunks
  * cwebp (windows): fix alpha image import on XP
  * autoconf/libwebp: enable dll builds for mingw
  * [cd]webp: always output windows errors
  * fix double to float conversion warning
  * cwebp: fix jpg encodes on XP
  * VP8LAllocateHistogramSet: fix overflow in size calculation
  * GetHistoBits: fix integer overflow
  * EncodeImageInternal: fix uninitialized free
  * fix the -g/O3 discrepancy for 32bit compile
  * fix the BITS=8 case
  * Make *InitSSE2() functions be empty on non-SSE2 platform
  * make *InitSSE2() functions be empty on non-SSE2 platform
  * make VP8DspInitNEON() public</changelog>
  <changelog author="jengelh@inai.de" date="1366113600">- Update to new upstream release 0.3.0
  * WebPINewRGB/WebPINewYUVA accept being passed a NULL output buffer
  and will perform auto-allocation.
  * Default filter option is now "-strong -f 60"
  * Encoding speed-up for lossy methods 3 to 6
  * Alpha encoding can be done in parallel to lossy using
  `cwebp -mt ...`
  * Color profile, metadata (XMP/EXIF) and animation support in the
  container was finalized.
  * Various NEON assembly additions
- Tool updates / additions:
  * gif2webp added
  * vwebp given color profile &amp; animation support
  * cwebp can preserve color profile / metadata with "-metadata"</changelog>
  <changelog author="jengelh@inai.de" date="1372248000">- Update to new upstream release 0.3.1
  * Add incremental decoding support for images containing
  ALPH and ICCP chunks.
- Enable libwebpmux, libwebpdemux</changelog>
  <changelog author="jengelh@inai.de" date="1389268800">- Update to new upstream release 0.4.0
  * improved gif2webp tool
  * numerous fixes, compression improvement and speed-up
  * dither option added to decoder (dwebp -dither 50 ...)
  * improved multi-threaded modes (-mt option)
  * improved filtering strength determination
  * BMP and TIFF format output added to 'dwebp'
  * Significant memory reduction for decoding lossy images with alpha.
  * Intertwined decoding of RGB and alpha for a shorter
  time-to-first-decoded-pixel.
  * WebPIterator has a new member 'has_alpha' denoting whether the
  frame contains transparency.
  * Container spec amended with new 'blending method' for animation.</changelog>
  <changelog author="jengelh@inai.de" date="1407758400">- Update to new upstream release 0.4.1
  * AArch64 (arm64) &amp; MIPS support/optimizations
  * NEON assembly additions: ~25% faster lossy decode/encode (-m 4);
  ~10% faster lossless decode;~5-10% faster lossless encode (-m 3/4)
  * dwebp/vwebp can read from stdin
  * cwebp/gif2webp can write to stdout
  * cwebp can read webp files; useful if storing sources as webp
  lossless</changelog>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="e6de12a90823e635797210c38d7048d513e48fc0b38172b237beef80d5f1e3cc" name="libwebp-devel" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="929c4174ebdc40cfd267adbf12942601eff9b67e1c8b632b837001fe59eda6be" name="libwebp-devel" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="9d0d5b7036e475ec61c6fc585da7c2f58ceca43698168c17f910d80af9a8cf43" name="libwebp-devel" arch="s390x">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="bb3f48a5d8740e2004599814faf3b8fd68fe2a27e7c7f3d816a67b5dd8f7ad11" name="libwebp-devel" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="b35e3fa5a377cdfda567a87050ee66dc8d7939ad9044a162c0c4dcdaa970e131" name="libwebp-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="24e00499cb82d3a6a8804d0ddc2f3eb0557a9fdefaf474e2eaa39d8dec1a771b" name="libwebp-tools" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="ec9c6719a3f09055afd98ab8785cee8748870e4af6bedbb661d626414e6d8b45" name="libwebp-tools" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="7e4a6c2a81251ff2735f2f2cc7f1a233eaef82ff075561319a656b3ab5433187" name="libwebp-tools" arch="s390x">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="3b7398946c91fbbc9f136f3da2ee86f35f19e67cc599c30be5f79d2963c70826" name="libwebp-tools" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="4bfb5c72c89a3b2c7a0917587e6fa5234238c56ef6dc86da48fc2806b28dbeb0" name="libwebp7" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="63d7b2d9575583eb233c95e924b554e8f00f3be07c32330a5b17b8786cbbc085" name="libwebp7" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="faf58f087d0ca971981cfca6d4dd70ee6f8d7fda7f0c94d07284eccd4fc82f8d" name="libwebp7" arch="s390x">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="60299bfed3e360addbf055ffaccbb82b0e45bd0eff8d54f1dbaf89845548e831" name="libwebp7" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="b433548426fe0515eb9566b9c8b8c271b743c3667754434da48d61c5a613e747" name="libwebp7-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="dd399ee5ffee569f48f3b5a1de5a21e4c2cbc37db3fda8df9c9aa9cef3776ea0" name="libwebpdecoder3" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="30c2d90460ecfec5d463454545ab86932fb775e888e5d838e759b30b6509e6c8" name="libwebpdecoder3" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="91f2503fbd4cb3711e3c34524986de902efe6a2abfa4323debb715a3bb288b8f" name="libwebpdecoder3" arch="s390x">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="545307b3d44b41d3714468c85188368ec7dd71f63f06501a23468c11fb072a9d" name="libwebpdecoder3" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="6842ae2c3a45cd282f6d73172a9513f1b863bde5e18cff6d99e79e524428cee6" name="libwebpdecoder3-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="f8d1594191ce182d1e6bc32b5659fcff13acfbb6acd4e88e30741b79192aaaf5" name="libwebpdemux2" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="ab20a87b126c642aa858d526a3f16a53a21e85aa9cd77965e15916a8993aab1d" name="libwebpdemux2" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="e7166f104085d764ac0c5df5e6ecf7a183f522ae2142867bf7bfb37c94846959" name="libwebpdemux2" arch="s390x">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="1a377b33a547e86235a694cc52f82b705ac25ff4f44f1006e3bba1790ed4c4ef" name="libwebpdemux2" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="3ccbb1a81872dcfb1991c76eeec2e93314ecd615db4411068d2cf3fbd5398e36" name="libwebpdemux2-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="d3e0fa6f0f5b904aab9d885991ae962ebc37de5579442e7c8e44118ed0e0bc0d" name="libwebpmux3" arch="aarch64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="023488eae746d1d9530f175f9cac1e57a584fc1c5d5c25e3502f08d358111c59" name="libwebpmux3" arch="ppc64le">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="6c35a128592d39cad6b1e77715d6d05165d603046f8e2102ffe145d1d572b368" name="libwebpmux3" arch="s390x">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="852bd79f29fcdef7a4fa98420dcf19d09806026d092a984805dd8921babbe316" name="libwebpmux3" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="f9bbf50064b0f10e505885450fc5d3f376bd900cd9fe0be2b9d574f236affed3" name="libwebpmux3-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="150200.3.5.1"/>
  <changelog author="dmueller@suse.com" date="1414497600">- update to 0.4.2:
  This is a binary compatible release.
  * Android / gcc build fixes
  * (Windows) fix reading from stdin and writing to stdout
  * gif2webp: miscellaneous fixes
  * fix 'alpha-leak' with lossy compression (issue #220)
  * the lossless bitstream spec has been amended to reflect the current code
- add aarch64-disable-neon.diff: work around compile failure with
  neon on aarch64.
- add libwebpdecoder1 subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1414584000">- Update baselibs.conf: make it match the currently build library
  packages.</changelog>
  <changelog author="jengelh@inai.de" date="1427630400">- Update to new upstream release 0.4.3
  * lossless decode fix and a multi-threading fix
  * documentation / vwebp updates for animation</changelog>
  <changelog author="dmueller@suse.com" date="1434196800">- remove aarch64-disable-neon.diff: compiler was fixed, neon
  can be compiled now</changelog>
  <changelog author="jengelh@inai.de" date="1435579200">- Add libwebp-devel to baselibs.conf [bnc#936417]</changelog>
  <changelog author="p.drouand@gmail.com" date="1449576000">- Update to version 0.4.4
  * rescaling out-of-bounds read fix (issue #254)
  * various build fixes and improvements (issues #253, #259, #262, #267, #268)
  * container documentation update
  * gif2webp transparency fix (issue #245)
- Add freeglut-devel build requires</changelog>
  <changelog author="mpluskal@suse.com" date="1455192000">- Update to 0.5.0
  * miscellaneous bug &amp; build fixes (issues #234, #258, #274, #275,
    [#278])
  * encoder &amp; decoder speed-ups on x86/ARM/MIPS for lossy &amp;
    lossless
    + note! YUV-&gt;RGB conversion was sped-up, but the results will
    be slightly different from previous releases
  * various lossless encoder improvements
  * gif2webp improvements, -min_size option added
  * tools fully support input from stdin and output to stdout (issue
    [#168])
  * New WebPAnimEncoder API for creating animations
  * New WebPAnimDecoder API for decoding animations
  * other API changes:
    + libwebp:
    WebPPictureSmartARGBToYUVA() (-pre 4 in cwebp)
    WebPConfig::exact (-exact in cwebp; -alpha_cleanup is now the
    default)
    WebPConfig::near_lossless (-near_lossless in cwebp)
    WebPFree() (free'ing webp allocated memory in other
    languages)
    WebPConfigLosslessPreset()
    WebPMemoryWriterClear()
    + libwebpdemux: removed experimental fragment related fields
    and functions
    + libwebpmux: WebPMuxSetCanvasSize()
  * new libwebpextras library with some uncommon import functions:
    WebPImportGray/WebPImportRGB565/WebPImportRGB4444
- Make building more verbose</changelog>
  <changelog author="mpluskal@suse.com" date="1455278400">- Update baselibs.conf</changelog>
  <changelog author="mrueckert@suse.de" date="1524916800">- update to 1.0.0
  - lossy encoder improvements to avoid chroma shifts in various
  - ircumstances (issues #308, #340)
  - big-endian fixes for decode, RGBA import and
    WebPPictureDistortion
  - Tool updates:
    gifwebp, anim_diff - default duration behavior (&lt;= 10ms)
    changed to match web browsers, transcoding
    tools (issue #379)
    img2webp, webpmux - allow options to be passed in via a file
    (issue #355)
- changes from 0.6.1
  - lossless performance and compression improvements + a new
    'cruncher' mode (-m 6 -q 100)
  - ARM performance improvements with clang (15-20% w/ndk r15c,
    issue #339)
  - webp-js: emscripten/webassembly based javascript decoder
  - miscellaneous bug &amp; build fixes (issue #329, #332, #343, #353,
    [#360], #361, #363)
  - Tool updates / additions:
  - added webpinfo - prints file format information (issue #330)
  - gif2webp - loop behavior modified to match Chrome M63+
    (crbug.com/649264); '-loop_compatibility' can be
    used for the old behavior
- changes from 0.6.0
  - lossless performance and compression improvements
  - miscellaneous performance improvements (SSE2, NEON, MSA)
  - webpmux gained a -duration option allowing for frame timing
    modification
  - new img2webp utility allowing a sequence of images to be
    converted to animated webp
  - API changes:
  - libwebp:
    WebPPictureSharpARGBToYUVA
    WebPPlaneDistortion
  - libwebpmux / gif2webp:
    WebPAnimEncoderOptions: kmax &lt;= 0 now disables keyframes,
    kmax == 1 forces all keyframes. See
    mux.h and the gif2webp manpage for
    details.
- changes from 0.5.2
  - This release covers CVE-2016-8888 and CVE-2016-9085.
  - further security related hardening in the tools; fixes to
    gif2webp/AnimEncoder (issues #310, #314, #316, #322),
    cwebp/libwebp (issue #312)
  - full libwebp (encoder &amp; decoder) iOS framework; libwebpdecoder
    WebP.framework renamed to WebPDecoder.framework (issue #307)
  - CMake support for Android Studio (2.2)
  - miscellaneous build related fixes (issue #306, #313)
  - miscellaneous documentation improvements (issue #225)
  - minor lossy encoder fixes and improvements
- changes from 0.5.1
  - miscellaneous bug fixes (issues #280, #289)
  - reverted alpha plane encoding with color cache for
    compatibility with libwebp 0.4.0-&gt;0.4.3 (issues #291, #298)
  - lossless encoding performance improvements
  - memory reduction in both lossless encoding and decoding
  - force mux output to be in the extended format (VP8X) when
    undefined chunks are present (issue #294)
  - gradle, cmake build support
  - workaround for compiler bug causing 64-bit decode failures on
    android devices using clang-3.8 in the r11c NDK
  - various WebPAnimEncoder improvements
- disable extras for now. it seems it is not building and
  installing a library anymore</changelog>
  <changelog author="mrueckert@suse.de" date="1524916801">- update baselibs.conf for the new soversions</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1562155200">- Update to version 1.0.2:
  * Lossless encoder speedups.
  * Lossy encoder speedup on ARM.
  * Lossless multi-threaded security fix.
- Changes from version 1.0.1:
  * Lossless encoder speedups.
  * Big-endian fix for alpha decoding.
  * Gif2webp fix for loop count=65535 transcode.
  * Further security related hardening in libwebp &amp; libwebpmux.
  * Miscellaneous bug &amp; build fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1566648000">- Update to new upstream release 1.0.3
  * Resize fixes for Nx1 sizes and the addition of non-opaque
    alpha values for odd sizes.
  * Lossless encode/decode performance improvements.
  * Lossy compression performance improvement at low quality
    levels with flat content.
  * vwebp will now preserve the aspect ratio of images that
    exceed monitor resolution by scaling the image to fit.</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1685448000">- Add libwebp-double-free.patch: Avoid a double free, upstream
  commit a486d800 (bsc#1210212 CVE-2023-1999).</changelog>
</package>
<package pkgid="0f8f9e359fd8982d96354829cdbcfbce7a261637fcfd4e6487f634d037e8916f" name="libwireshark15" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="ca8043b316c2e30b41fb3ffd963c276549d153dcffa5313ec7d0973b17da3e9c" name="libwireshark15" arch="ppc64le">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="a6aa6802da8e2baf968be1f39156e7db8b6ade4ffbd261bcabc37e8a722bc81e" name="libwireshark15" arch="s390x">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="ffe195bb4cd84b99d8f6a726eb0b10cf5f6c82ecef52faeeb773a2fa3ece32ab" name="libwireshark15" arch="x86_64">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="35a92cf3d5a04bf377938efb2193bcccfe3665260065366586de7da500795f2b" name="libwiretap12" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="6a86f7df4b20f9abbc8dc2fa76892cdbc55e15bdfce95654d07b6d863575c971" name="libwiretap12" arch="ppc64le">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="c8c7e8cdc4e97eb6a0e3695fc41b3373d57f01008feb0f633ba379a19c545be4" name="libwiretap12" arch="s390x">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="13e06fe45cfdf7974612d0dd7ed374ce0a11959e8e89199ddadcf5e2ce143f69" name="libwiretap12" arch="x86_64">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="947c6655ad867804fd64f185565fade2071a83a4da0bd0d357b8ed5248f62d56" name="libwsutil13" arch="aarch64">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="0197cc71d53584de356e37f424a8b559869b059f8d48cfddacb154a215c98bce" name="libwsutil13" arch="ppc64le">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="9127b2dc51591806ec704ef8182f8a6ac9f65aa14bee90bf60ac06866032af0a" name="libwsutil13" arch="s390x">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="370d617e1911814b2bbadb3ac56e3187562ae018eecf1bbc5854d26c679f35ba" name="libwsutil13" arch="x86_64">
  <version epoch="0" ver="3.6.14" rel="150000.3.92.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1622721600">- Wireshark 3.4.6:
  * Fix DVB-S2-BB dissector infinite loop (boo#1186790, wnpa-sec-2021-04)
  * Fix Macro filters handling of escaped characters
  * Fix Display filter crash
  * Fix IEEE-1588 Signalling Unicast TLV incorrectly reported as being
    malformed
  * Fix IETF QUIC TLS decryption error with extraneous packets during
    the handshake
  * Fix Statistics - Resolved Addresses: multi-protocol (TCP/UDP/...)
    ports not displayed</changelog>
  <changelog author="rfrohl@suse.com" date="1626436800">- Wireshark 3.4.7:
  * CVE-2021-22235: Fix DNP dissector crash (boo#1188375, wnpa-sec-2021-06)
  * Fix TCP dissector - Erroneous DSACK reporting
  * Fix No wlan_radio.duration calculated for PHY type: 802.11ac (VHT)
  * Fix NAN Dissector has wrong minimum length for availability attribute</changelog>
  <changelog author="rfrohl@suse.com" date="1629979200">- Wireshark 3.4.8:
  * Dissector bug reported for Bluetooth Cycling Power Measurement
    characteristic for extreme angles value
  * Raknet Addresses are incorrectly identified.
  * Editcap saving files as ethernet when specifying '-T ieee-802-11-*'
  * CoAP dissector confuses Content-Format with Accept
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1633608000">- Wireshark 3.4.9:
  * TShark PDML output embeds "proto" elements within other "proto" elements.
  * Filter expressions comparing against single-octet hex strings where the hex digit string equals a protocol name don’t work.
  * AMQP 0.9: dissector fails to handle Content-Body frame split across TCP packets.
  * IEEE 802.15.4: Missing check on "PAN ID Present" bit of the Multipurpose Frame Control field.
  * Wireshark ignored some character in filename when exporting SMB objects.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.9.html</changelog>
  <changelog author="info@paolostivanin.com" date="1637236800">- Wireshark 3.4.10 (bsc#1192830):
  * CVE-2021-39929: Bluetooth DHT dissector crash.
  * CVE-2021-39926: Bluetooth HCI_ISO dissector crash.
  * CVE-2021-39925: Bluetooth SDP dissector crash.
  * CVE-2021-39924: Bluetooth DHT dissector large loop.
  * CVE-2021-39922: C12.22 dissector crash.
  * CVE-2021-39928: IEEE 802.11 dissector crash.
  * CVE-2021-39921: Modbus dissector crash.
  * CVE-2021-39920: IPPUSB dissector crash.
  * PNRP dissector large loop.
  * Fix forward compatibility issue with the I/O Graphs preferences.
  * OSS-Fuzz: Heap-use-after-free in ROS.
  * Allow for '\0' (NULL) character as filter instead of requiring 0x00 for the character match.
  * Dumpcap with threads reports double received count vs captured.
  * HTTP2 dissector reports an assertion error on large data frames.
  * Shark stops capturing when capturing with multiple files and packet printing enabled.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.4.10.html</changelog>
  <changelog author="rfrohl@suse.com" date="1640001600">- Wireshark 3.6.0:
  * CVE-2021-4186: Gryphon dissector crash (boo#1194165).
  * Several changes have been made to the display filter syntax:
  - The expression "a != b" now always has the same meaning as
    "!(a == b)". In particular this means filter expressions with
    multi-value fields like "ip.addr != 1.1.1.1" will work as
    expected (the result is the same as typing "ip.src != 1.1.1.1 and
    ip.dst != 1.1.1.1"). This avoids the contradiction (a == b and a!= b)
    being true.
  - It is possible to use the syntax "a ~= b" or "a any_ne b" to
    recover the previous (inconsistent with "==") logic for not equal.
  - Literal strings can now be specified using raw string syntax,
    identical to raw strings in the Python programming language. This
    can be used to avoid the complexity of using two levels of
    character escapes with regular expressions.
  - Set elements must now be separated using a comma. A filter
    such as http.request.method in {"GET" "HEAD"} must be written as ...
    in {"GET", "HEAD"}. Whitespace is not significant. The
    previous use of whitespace as separator is deprecated and will be
    removed in a future version.
  - Support for the syntax "a not in b" with the same meaning as
    "not a in b" has been added.
  * TCP conversations now support a completeness criteria, which
    facilitates the identification of TCP streams having any of
    opening or closing handshakes, a payload, in any combination. It
    can be accessed with the new tcp.completeness filter.
  * Protobuf fields that are not serialized on the wire or otherwise
    missing in capture files can now be displayed with default values
    by setting the new "add_default_value" preference. The default
    values might be explicitly declared in "proto2" files, or false
    for bools, first value for enums, zero for numeric types.
  * Wireshark now supports reading Event Tracing for Windows (ETW). A
    new extcap named ETW reader is created that now can open an etl
    file, convert all events in the file to DLT_ETW packets and write
    to a specified FIFO destination. Also, a new packet_etw dissector
    is created to dissect DLT_ETW packets so Wireshark can display
    the DLT_ETW packet header, its message and packet_etw dissector
    calls packet_mbim sub_dissector if its provider matches the MBIM
    provider GUID.
  * "Follow DCCP stream" feature to filter for and extract the contents of DCCP streams.
  * Wireshark now supports dissecting RTP packets with OPUS payloads.
  * Added support for Shared Memory Communications (SMC) (jsc#SLE-18727)
- Further features, bug fixes and new and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.0.html
- updated patch to work with upstream changes
  wireshark-0001-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1640865600">- Wireshark 3.6.1:
  * CVE-2021-4185: RTMPT dissector infinite loop (boo#1194166)
  * CVE-2021-4184: BitTorrent DHT dissector infinite loop (boo#1194167)
  * CVE-2021-4183: pcapng file parser crash (boo#1194168)
  * CVE-2021-4182: RFC 7468 file parser infinite loop (boo#1194169)
  * CVE-2021-4181: Sysdig Event dissector crash (boo#1194170)
  * CVE-2021-4190: Kafka dissector infinite loop (boo#1194171)
  * Add '-o console.log.level:' transitional option for backward-
    compatibilty replacing the 'console.log.level' preference
    removed in 3.6.0. Only avoids cli failures and will be removed
    in the future.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.1.html</changelog>
  <changelog author="rfrohl@suse.com" date="1641816000">- Fix SLE15 build issue
  added wireshark-0000-wsutil-implicit_declaration_memcpy.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1642507200">- Fix wireshark-plugin-libvirt build after wmem_alloc() moved from
  libwireshark.so to libwsutil.so (bsc#1194780)
  * Added wireshark-0001-pkgconfig.patch
- Renamed wireshark-0001-dumpcap-permission-denied.patch
  to  wireshark-0010-dumpcap-permission-denied.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644580800">- Wireshark 3.6.2:
  * CVE-2022-0586: RTMPT dissector infinite loop (boo#1195866)
  * CVE-2022-0585: Large loops in multiple dissectors (boo#1195867)
  * CVE-2022-0583: PVFS dissector crash (boo#1195868)
  * CVE-2022-0582: CSN.1 dissector crash (boo#1195869)
  * CVE-2022-0581: CMS dissector crash (boo#1195870)
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.2.html</changelog>
  <changelog author="rfrohl@suse.com" date="1648123200">- Wireshark 3.6.3:
  * Fuzz job crash output: fuzz-2021-01-19-7399.pcap.
  * TLS dissector incorrectly reports JA3 values.
  * "Wiki Protocol page" in packet details menu is broken - wiki pages not migrated to GitLab?.
  * Dissector bug, protocol PFCP display Flow Description IE value error in Additional Flow Description of PFD Management Request Message.
  * Bluetooth: Fails to open Log file for SCO connection.
  * Fuzz job crash output: fuzz-2022-03-07-10896.pcap.
  * libwiretap: Save as ERF causes segmentation fault.
  * HTTP server returning multiple early hints shows too many responses in "Follow HTTP Stream".
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.3.html</changelog>
  <changelog author="rfrohl@suse.com" date="1651752000">- Wireshark 3.6.5 and 3.6.4:
  * The 3.6.5 release fixes an installation issue on Windows which was introduced in the 3.6.4 release
  * Build failure with GCC 7.5, Linux.
  * RDP dissected as SSL.
  * IPFIX/cflow dissector asserts when varlen field length is zero.
  * 802.11ax HE PHY "Device Class" dissected incorrectly.
  * DHCPv6 Option 15 User-Class incorrectly parsed in Wireshark.
  * ICMPv6 dissector: PREF64 option parsing only works for prefix length 96.
  * Switch macOS updater to Sparkle 2.
  * CQL timestamp dissector displays the wrong timestamp.
  * Unable to dissect 802.11ax Target Wake Time (TWT) packets.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.4.html</changelog>
  <changelog author="rfrohl@suse.com" date="1655726400">- Wireshark 3.6.6:
  * TLS: RSA decryption fails with Extended Master Secret and renegotiation.
  * "dfilter" file on Windows adds carriage returns, and requires line feeds.
  * "Browse" button in Prefs/Name Resolution/MaxMind crashes Wireshark on macOS.
  * TFTP: some packets are not recognized as TFTP packets with 3.6.5.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.6.html</changelog>
  <changelog author="rfrohl@suse.com" date="1659009600">- Wireshark 3.6.7:
  * Multiple Files preference "Create new file automatically… after" [time] working incorrectly.
  * get_filter Lua function doesn’t return the filter.
  * Dissector bug, protocol HTTP failed assertion "saved_layers_len &lt; 500" with chunked/multipart.
  * Wrong EtherCAT bit label (possible dissector bug).
  * UDP packets falsely marked as "malformed packet".
  * TLS certificate parser with filter crash.
  * Incorrect type for the IEC 60870 APDU appears in packet details pane.
  * NHRP Problem.
  * EtherCAT CoE header unknown type.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.7.html</changelog>
  <changelog author="rfrohl@suse.com" date="1662638400">- Wireshark 3.6.8:
  * CVE-2022-3190: F5 Ethernet Trailer dissector infinite loop (boo#1203388).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.8.html</changelog>
  <changelog author="rfrohl@suse.com" date="1670500800">- Wireshark 3.6.10:
  * CVE-2022-4345: Multiple dissector infinite loops (bsc#1206189).
  * Kafka dissector memory exhaustion (bsc#1206190).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.10.html
- Wireshark 3.6.9:
  * CVE-2022-3725: OPUS dissector crash (bsc#1204822).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.9.html</changelog>
  <changelog author="rfrohl@suse.com" date="1674216000">- Wireshark 3.6.11 (bsc#1207447):
  * CVE-2023-0417: NFS dissector memory leak (bsc#1207669).
  * CVE-2023-0413: Dissection engine crash (bsc#1207665).
  * CVE-2023-0416: GNW dissector crash (bsc#1207668).
  * CVE-2023-0415: iSCSI dissector crash (bsc#1207667).
  * CVE-2023-0411: Multiple dissector excessive loops (bsc#1207663).
  * CVE-2023-0412: TIPC dissector crash (bsc#1207664).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.11.html</changelog>
  <changelog author="rfrohl@suse.com" date="1677844800">- Wireshark 3.6.12:
  * CVE-2023-1161: ISO 15765 and ISO 10681 dissector crash (bsc#1208914).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.12.html</changelog>
  <changelog author="rfrohl@suse.com" date="1681387200">- Wireshark 3.6.13:
  * CVE-2023-1992: RPCoRDMA dissector crash (bsc#1210405).
  * CVE-2023-1993: LISP dissector large loop (bsc#1210404).
  * CVE-2023-1994: GQUIC dissector crash (bsc#1210403).
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.13.html</changelog>
  <changelog author="rfrohl@suse.com" date="1685016000">- Wireshark 3.6.14:
  * CVE-2023-2855: Candump log file parser crash (boo#1211703).
  * CVE-2023-2856: VMS TCPIPtrace file parser crash (boo#1211707).
  * CVE-2023-2857: BLF file parser crash (boo#1211705).
  * CVE-2023-2858: NetScaler file parser crash (boo#1211706).
  * CVE-2023-0668: IEEE C37.118 Synchrophasor dissector crash (boo#1211710).
  * GDSDB dissector infinite loop.
  * XRA dissector infinite loop.
- Further features, bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-3.6.14.html</changelog>
</package>
<package pkgid="1340d52a1c47d2eb9a7a22e33b514c24ee8f82de02283b9c3b63375aadeb796d" name="libxmlsec1-1" arch="aarch64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="2bd77d64c4ecc736560ae8daee7c822f9b779837f1440dd4aededcbb02675458" name="libxmlsec1-1" arch="ppc64le">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="c8016de02b2b57ff1b22fcbe339978a804f6140b765fe46f7e74136fddc2f7fd" name="libxmlsec1-1" arch="s390x">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="eea0a0b0f88c5f378f7e988923d2779dd48149b64db90ff3232cdcfb87547a86" name="libxmlsec1-1" arch="x86_64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="adc72f4c694aebe7b96f5b328c92ea224326cccc273a274d43dd61bc0a8f8158" name="libxmlsec1-gcrypt1" arch="aarch64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="2f7d6dfcb1f0b6001c4453b682a3be846a7632da578bde5575a0e2e75c34ebe4" name="libxmlsec1-gcrypt1" arch="ppc64le">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="5015371d885f8aab2118d8311e6cb72327f0378ce48333d6dcd38616171b6ebe" name="libxmlsec1-gcrypt1" arch="s390x">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="342c5f5351a49d6c2a61ad06fefa44f04ab2c2ecd0c3c46944a3947d4876ba56" name="libxmlsec1-gcrypt1" arch="x86_64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="d047e5e5bacff1f5be4ed52aea0a8fcebbc16d6f213d45f1480d355b8329aba4" name="libxmlsec1-gnutls1" arch="aarch64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="a05f12d2e50695baa8364b1e844ebc4bb493887bb6eea32d38d918ce3b690794" name="libxmlsec1-gnutls1" arch="ppc64le">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="2bcc3da0ba06aa8000316c2394f6e93e83dcced9f6fc454a6fbe1623b933bfc4" name="libxmlsec1-gnutls1" arch="s390x">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="b5bb75f41a74c98a03e71bfd4f413c854be3087b06358d9b8d61e4a063c076bb" name="libxmlsec1-gnutls1" arch="x86_64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="67c22e2f6214b1ff73b9820ba27be88a606f40081caa39637e5f1cbf840d61b4" name="libxmlsec1-nss1" arch="aarch64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="77f6c35383040bfaf631e584178c2bd0417aa96314a3e2b400080e7cbccd74de" name="libxmlsec1-nss1" arch="ppc64le">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="18f4e8837301cab5da7a1afc106355d5fd42a3de6ea406b311914a194a250511" name="libxmlsec1-nss1" arch="s390x">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="177fb1790af28039c2a330c55be9c41e87b5568cd41754c188bc1c69f1caea50" name="libxmlsec1-nss1" arch="x86_64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="9e70633f1546ff04922d48346047bbb37afdf50de6df4542a2ae97a8fc28d25a" name="libxmlsec1-openssl1" arch="aarch64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="e900f7189743e88e12e9de9fdbbfc12c052e768e1e867a7ddecab2e16bec8e48" name="libxmlsec1-openssl1" arch="ppc64le">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="ba55ff78af52d6d9e620e3c8717dedb6321277d77e11c3a1e37267f4fb512eae" name="libxmlsec1-openssl1" arch="s390x">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="adf92cde624ab64227484f0a11fa1c33fe3e575c527e07ed24ecbc001f8dfcb4" name="libxmlsec1-openssl1" arch="x86_64">
  <version epoch="0" ver="1.2.28" rel="150100.7.13.4"/>
  <changelog author="astieger@suse.com" date="1441281600">- update to 1.2.20:
  * fix a number of miscellaneous bugs
  * update expired or soon-to-be-expired certificates in test suite</changelog>
  <changelog author="tchvatal@suse.com" date="1464177600">- Version update to 1.2.22 (fate#320861):
  * see the ChangeLog for most detailed output
  * openssl 1.1 support
  * Few features from libreoffice for integrated
  * Run the testsuite</changelog>
  <changelog author="tchvatal@suse.com" date="1480334400">- Version update to 1.2.23:
  * Full support for OpenSSL 1.1.0
  * Several other small fixes</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
</package>
<package pkgid="ff4b66d4d31936455b9411a912d899c68c84e30963bc29599aa2f1ee416e8ee7" name="libzck-devel" arch="aarch64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="57c38b71b73d97bd83c843993e1fcc687c98d966d0f6803120ccb7cff3a2e9fe" name="libzck-devel" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="4308b9698b2a996731304b1488203774eae0b45208c1cf4c22ba9ee1fd203162" name="libzck-devel" arch="s390x">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="140ac85fec4ef3c77f36e5315522e7a83ff36fe3d82dac85fa6ef4f4b9dab87a" name="libzck-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="ea3c415e3a6f9051643eff0ac971510fc507fc475883b6760bf43251a4209969" name="libzck1" arch="aarch64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="36f2ee8ef8c3786b785d26c38fc35b5610fbc4f96cbe0964f3282db84f524ead" name="libzck1" arch="ppc64le">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="4221d63f17a773a1eba07e5c6868eb06edef4aa6910fbdbe54686f652fee3d6b" name="libzck1" arch="s390x">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="d38b1fe6a42bf61feb885c48f5b7e067b60d6a3bba08abd60ab920bfbfd6aa51" name="libzck1" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="deeb52655c34786e5703051811baca16c473e3176223dcd4312032d4edf7d89f" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="fd1c4186d4fd3a0841bcec9486099b6689da50be7416fc33ccd7046a2eff70f1" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="e0c6f897bce261ea63171a66fd9cd507bdd1f99c854e639706d789f62bf24040" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="e266c198877a2ce39c29d12fc849b8ec88d846306eebbc305562ab937d59f750" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="3d1da0ce2f4978795a0a9ca168e6379dc610931f3efa8d78258a2129169b7326" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="90e4c2b315247bb439083ea0cc07f99d536cefd751c3e041f14cef6735a73247" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="a2ab97d35b91702af969f6dbce7e0118a3e128645423eeec66153ca71bcef25e" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="18afe7e4a0eba26b5bc446fbb40053c4011a5d3796f7e61e99e93c8f6f8a4493" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="021597161e769b08d075de06eaef87f6a1e1ae5c18f232d8984cf40f2db05949" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="2d74f4e1a00f6689a61ddda4ddf09b40b344e62595357018d21d0b86f727c23e" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="0f322477ed3b45ed44f95fb40c8eaee85fb6d2912d827952c2f6e8ce4c450a6f" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="3bf311a8197eaccd0d42eafae85fee1d5be366f2941bab250c16e5f1e277679b" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="dbc2d352983e444d81bfa905a9a5e618fda306ce7d9253ceffa0fee3aa02b10b" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="5d10516847ac29a7dc3deb7ef3a4dffacb3dd4307b27e87d93f4a324f71e2511" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="f83012dee3d3af42513f61caf297bb03db25afded2e6bdaea6f294226510e05a" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="e6c9d7e627adae6e84e0384ab638d4bd728bb49284d598ab6d64ebb79acf27b0" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="173b1232b1c0503bb7e0857ac5b50abdedf26b8819d602e902c9baa6ff585af3" name="libzypp" arch="ppc64le">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="55e3dcf747e4fe16a7bed3e3d0d4ccf801585d42f2c264fd23d57035a6e10265" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="cffe05155518f147225108fa735656c3c1c46e04cd9e2aad1a136b4aa2269a9c" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="dca51b0b959645a90191dbcec05ca2fb37bec92895f42cf623c9c336d2549c78" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="89436fd163713f384f9729cade69f47f813e5e11c6f5e170f0681260b2e8087b" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="7e4e6d2ad4094750d2fda29196640f975f717d2307571a0b002339242973d7d6" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="b933f09f92d2a637633ab68ed5d03f7455a5f3f49f580984d4266fb9c9f69d92" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="b15bc180c6c1262fa48d995393291dbe1c0907cc3ba42678e164bade72b59a8d" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="dc79ea2d8366e3e0863704e6edcd4933989ba20eaf68a38dad5fdb7b4c0a568f" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="2f22c8d8353def6eae73b7ac452b7d80e8570937ae337f07fd93da11f1a1174b" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="f4897c707d5e73253e18dfe4d21447e3e02c0d3d68e55db51810fe2e1d5b762a" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="71c8ef279241787244e4b017996676b9fa734b7e719efa054e98be490a6f264d" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="8ba8e31d474f61abbafbc2d551114944c5c13d5c2d6bee246c73b5a8a77d7220" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="d815aa30434be1b0b2c109fc2b52ee5f39f409193e6df134a06638cfa549f310" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="2407dc573759e7fbd946919b1be97382deae9914278ae12a68cfe35cdeaac583" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="9c98e173c33ffe140e14641e5e000d9246174651936e8bfd85fd5ae7e05577eb" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="896665be71190b26580d81f1717fbbc4a5f5d370739379733e9aee32d3125357" name="libzypp-devel" arch="aarch64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="fab4478280651006be0774bc8d89db8637ca5241c9d09dda6de77db2a5a5a420" name="libzypp-devel" arch="ppc64le">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="203c68ee143895ef9d34d75a0411bcca9d4e158416bb29e94c579addaa6a1fe9" name="libzypp-devel" arch="s390x">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="f5e06f3c9528af72f1887da82ad8412ebdeae0588a5e5362a3159696b0355dc6" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="22e3aa71d88183b1beff690063ea70b466dd2bf54f84553a487d1c06519dc331" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="231f502f9c7037b95b9c6eb3508fa4286e347179b350f5b97423f057f5a6599d" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="50889607f526a1de9cb9134644671596f7a6fb591f186c2c5fa99ab37a8f2d5f" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="344bddd7ae40d2ab02de9b92f52511a751a3a95064a3e1c1dd5f64de5f5015da" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="c23395e1192f546046d8a77343c5f0f9b9100372bec36b6a7364c5307291e8ff" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="27d3347bfb66102081a936e256e58163bd90e881e07a78252f8b12843e885ec0" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="c7257c40ac3127629c564a0026d3433a6dae8f4b38f557d2bbd2e05d7385ebd6" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="7c2902f63235309e94fd20b0387db73872b90de1ea0825a7d66c324662b65964" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="c408263fe6d429569a85864f757332b145671461f682598b5eb66c1392ccd364" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="438fa90f4645477e4813f0c807adfd8502614551bb4e2f1453e6f2bcc2c283dc" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="2bc5d1afb634f4b190f8ee6622df85d7c348caa3007e68feae4b204db8c10766" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="b21a31314b5c6aa29a0f8773e1b7bcfb289f67bbae63a4ff765eb656132ae5f5" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="bcd02459f621509f37be4493de17b10cb1dcec7595cd43ecdf6867cb3054aa0f" name="libzypp-devel-doc" arch="aarch64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="542d9a73394aa57840c4ffbbdf0d57e5a721b50635ac1402ff398fa0ec3647f8" name="libzypp-devel-doc" arch="ppc64le">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="8391560e0b05bbcc4a7900549ac173643cb672785a42a26c92d7c430a145b7f2" name="libzypp-devel-doc" arch="s390x">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="c11b8ebeb83334638f8714c8b3a1ccbfa3221cb1071875a7d154ba5d0b262eac" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="11183ce9cbd040b46caf4b824c63672b5e340b0b87b796a4e1a89bcfd5473424" name="lifecycle-data-sle-module-live-patching" arch="noarch">
  <version epoch="0" ver="15" rel="150000.4.93.1"/>
  <changelog author="lpechacek@suse.com" date="1596715200">- Added data for 4_12_14-150_55, 4_12_14-197_48, 5_3_18-22, 5_3_18-24_9. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1600776000">- Added data for 4_12_14-150_58, 4_12_14-197_51, 4_12_14-197_56,
  5_3_18-24_12, 5_3_18-24_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1605182400">- Added data for 4_12_14-197_61, 4_12_14-197_64, 4_12_14-197_67,
  5_3_18-24_24, 5_3_18-24_29, 5_3_18-24_34, 5_3_18-24_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1608120000">- Added data for 4_12_14-150_63, 4_12_14-197_72, 4_12_14-197_75,
  5_3_18-24_43. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1613390400">- Added data for 4_12_14-150_66, 4_12_14-197_78, 5_3_18-24_46, 5_3_18-24_49. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1617192000">- Added data for 4_12_14-150_69, 4_12_14-197_83, 4_12_14-197_86,
  5_3_18-24_52. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1621425600">- Added data for 4_12_14-150_72, 4_12_14-197_89, 5_3_18-24_61, 5_3_18-24_64. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1626264000">- Added data for 4_12_14-197_92, 5_3_18-24_53_4, 5_3_18-24_67, 5_3_18-57,
  5_3_18-59_10, 5_3_18-59_5. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1630497600">- Added data for 4_12_14-150_75, 4_12_14-197_99, 5_3_18-24_70, 5_3_18-24_75,
  5_3_18-24_78, 5_3_18-59_13, 5_3_18-59_16, 5_3_18-59_19. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1634731200">- Added data for 5_3_18-24_83, 5_3_18-24_86, 5_3_18-59_24, 5_3_18-59_27. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1639483200">- Added data for 4_12_14-150_78, 4_12_14-197_102, 5_3_18-24_93,
  5_3_18-24_96, 5_3_18-59_30, 5_3_18-59_34, 5_3_18-59_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1643803200">- Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1647518400">- Added data for 4_12_14-150_83, 4_12_14-150_86, 4_12_14-197_105,
  4_12_14-197_108, 5_3_18-150300_59_46,
  5_3_18-150300_59_49, 5_3_18-150300_59_54, 5_3_18-24_102,
  5_3_18-24_107. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1651665600">- Added data for 4_12_14-150000_150_89, 4_12_14-150100_197_111,
  5_3_18-150200_24_112, 5_3_18-150300_59_60,
  5_3_18-150300_59_63. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1657540800">- Added data for 4_12_14-150000_150_92, 4_12_14-150100_197_114,
  5_14_21-150400_22, 5_3_18-150200_24_115,
  5_3_18-150300_59_68, 5_3_18-150300_59_71,
  5_3_18-150300_59_76. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1662638400">- Added data for 4_12_14-150000_150_95, 4_12_14-150000_150_98,
  4_12_14-150100_197_117, 4_12_14-150100_197_120,
  5_14_21-150400_24_11, 5_14_21-150400_24_18,
  5_3_18-150200_24_120, 5_3_18-150200_24_126,
  5_3_18-150300_59_81, 5_3_18-150300_59_87,
  5_3_18-150300_59_90. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1667563200">- Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104,
  4_12_14-150100_197_123, 4_12_14-150100_197_126,
  5_14_21-150400_24_21, 5_14_21-150400_24_28,
  5_3_18-150200_24_129, 5_3_18-150200_24_134,
  5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1673265600">- Added data for 4_12_14-150000_150_109,
  4_12_14-150100_197_131, 5_14_21-150400_24_33,
  5_14_21-150400_24_38, 5_3_18-150200_24_139,
  5_3_18-150300_59_101, 5_3_18-150300_59_106,
  +kernel-livepatch-5_14_21-150400_15_5-rt,*,2023-12-23 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1678449600">- Added data for 4_12_14-150100_197_134, 5_14_21-150400_24_41,
  5_14_21-150400_24_46, 5_3_18-150200_24_142,
  5_3_18-150300_59_109, 5_3_18-150300_59_112,
  +kernel-livepatch-5_14_21-150400_15_11-rt,*,2024-02-23+kernel-livepatch-5_14_21-150400_15_8-rt,*,2024-01-26 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1683547200">- Added data for 4_12_14-150100_197_137,
  4_12_14-150100_197_142, 5_14_21-150400_24_49,
  5_14_21-150400_24_55, 5_14_21-150400_24_60,
  5_3_18-150200_24_145, 5_3_18-150200_24_148,
  5_3_18-150300_59_115, 5_3_18-150300_59_118,
  +kernel-livepatch-5_14_21-150400_15_14-rt,*,2024-03-15+kernel-livepatch-5_14_21-150400_15_18-rt,*,2024-03-28+kernel-livepatch-5_14_21-150400_15_23-rt,*,2024-04-25 (bsc#1020320)</changelog>
</package>
<package pkgid="ab507f8bf647ec5ada57b93183966259ae8dec9868a4f853d784e3cf44909934" name="lifecycle-data-sle-module-live-patching" arch="src">
  <version epoch="0" ver="15" rel="150000.4.93.1"/>
  <changelog author="lpechacek@suse.com" date="1596715200">- Added data for 4_12_14-150_55, 4_12_14-197_48, 5_3_18-22, 5_3_18-24_9. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1600776000">- Added data for 4_12_14-150_58, 4_12_14-197_51, 4_12_14-197_56,
  5_3_18-24_12, 5_3_18-24_15. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1605182400">- Added data for 4_12_14-197_61, 4_12_14-197_64, 4_12_14-197_67,
  5_3_18-24_24, 5_3_18-24_29, 5_3_18-24_34, 5_3_18-24_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1608120000">- Added data for 4_12_14-150_63, 4_12_14-197_72, 4_12_14-197_75,
  5_3_18-24_43. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1613390400">- Added data for 4_12_14-150_66, 4_12_14-197_78, 5_3_18-24_46, 5_3_18-24_49. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1617192000">- Added data for 4_12_14-150_69, 4_12_14-197_83, 4_12_14-197_86,
  5_3_18-24_52. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1621425600">- Added data for 4_12_14-150_72, 4_12_14-197_89, 5_3_18-24_61, 5_3_18-24_64. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1626264000">- Added data for 4_12_14-197_92, 5_3_18-24_53_4, 5_3_18-24_67, 5_3_18-57,
  5_3_18-59_10, 5_3_18-59_5. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1630497600">- Added data for 4_12_14-150_75, 4_12_14-197_99, 5_3_18-24_70, 5_3_18-24_75,
  5_3_18-24_78, 5_3_18-59_13, 5_3_18-59_16, 5_3_18-59_19. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1634731200">- Added data for 5_3_18-24_83, 5_3_18-24_86, 5_3_18-59_24, 5_3_18-59_27. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1639483200">- Added data for 4_12_14-150_78, 4_12_14-197_102, 5_3_18-24_93,
  5_3_18-24_96, 5_3_18-59_30, 5_3_18-59_34, 5_3_18-59_37. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1643803200">- Added data for 5_3_18-150300_59_43, 5_3_18-24_99, 5_3_18-59_40. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1647518400">- Added data for 4_12_14-150_83, 4_12_14-150_86, 4_12_14-197_105,
  4_12_14-197_108, 5_3_18-150300_59_46,
  5_3_18-150300_59_49, 5_3_18-150300_59_54, 5_3_18-24_102,
  5_3_18-24_107. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1651665600">- Added data for 4_12_14-150000_150_89, 4_12_14-150100_197_111,
  5_3_18-150200_24_112, 5_3_18-150300_59_60,
  5_3_18-150300_59_63. (bsc#1020320)</changelog>
  <changelog author="lpechacek@suse.com" date="1657540800">- Added data for 4_12_14-150000_150_92, 4_12_14-150100_197_114,
  5_14_21-150400_22, 5_3_18-150200_24_115,
  5_3_18-150300_59_68, 5_3_18-150300_59_71,
  5_3_18-150300_59_76. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1662638400">- Added data for 4_12_14-150000_150_95, 4_12_14-150000_150_98,
  4_12_14-150100_197_117, 4_12_14-150100_197_120,
  5_14_21-150400_24_11, 5_14_21-150400_24_18,
  5_3_18-150200_24_120, 5_3_18-150200_24_126,
  5_3_18-150300_59_81, 5_3_18-150300_59_87,
  5_3_18-150300_59_90. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1667563200">- Added data for 4_12_14-150000_150_101, 4_12_14-150000_150_104,
  4_12_14-150100_197_123, 4_12_14-150100_197_126,
  5_14_21-150400_24_21, 5_14_21-150400_24_28,
  5_3_18-150200_24_129, 5_3_18-150200_24_134,
  5_3_18-150300_59_93, 5_3_18-150300_59_98. (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1673265600">- Added data for 4_12_14-150000_150_109,
  4_12_14-150100_197_131, 5_14_21-150400_24_33,
  5_14_21-150400_24_38, 5_3_18-150200_24_139,
  5_3_18-150300_59_101, 5_3_18-150300_59_106,
  +kernel-livepatch-5_14_21-150400_15_5-rt,*,2023-12-23 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1678449600">- Added data for 4_12_14-150100_197_134, 5_14_21-150400_24_41,
  5_14_21-150400_24_46, 5_3_18-150200_24_142,
  5_3_18-150300_59_109, 5_3_18-150300_59_112,
  +kernel-livepatch-5_14_21-150400_15_11-rt,*,2024-02-23+kernel-livepatch-5_14_21-150400_15_8-rt,*,2024-01-26 (bsc#1020320)</changelog>
  <changelog author="mpdesouza@suse.com" date="1683547200">- Added data for 4_12_14-150100_197_137,
  4_12_14-150100_197_142, 5_14_21-150400_24_49,
  5_14_21-150400_24_55, 5_14_21-150400_24_60,
  5_3_18-150200_24_145, 5_3_18-150200_24_148,
  5_3_18-150300_59_115, 5_3_18-150300_59_118,
  +kernel-livepatch-5_14_21-150400_15_14-rt,*,2024-03-15+kernel-livepatch-5_14_21-150400_15_18-rt,*,2024-03-28+kernel-livepatch-5_14_21-150400_15_23-rt,*,2024-04-25 (bsc#1020320)</changelog>
</package>
<package pkgid="5625cb7c3790149401b1baae40702dee1bb3477677946bc0f4465f51ea973570" name="lsvpd" arch="ppc64le">
  <version epoch="0" ver="1.7.14" rel="150400.3.10.1"/>
  <changelog author="mpluskal@suse.com" date="1429531200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jloeser@suse.com" date="1440763200">- support lsvpd on PowerKVM guest (bsc#941938)
- added patches:
  * lsvpd.bug-941938_add_powerkvm_guest_detection1.patch
  * lsvpd.bug-941938_add_powerkvm_guest_detection2.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.7.6
  * lsmcode is enhanced to support OpenPower systems
  * Fixed security issues like buffer overflow, memory allocation
    validation
  * Improved error handling
- Remove dependency on fillup and insserv; the package doesn't contain
  any sysvinit nor sysconfig file
- Remove patches; fixed on upstream release
  * lsvpd.no-return-in-nonvoid-function.patch
  * lsvpd.bug-941938_add_powerkvm_guest_detection1.patch
  * lsvpd.bug-941938_add_powerkvm_guest_detection2.patch</changelog>
  <changelog author="jloeser@suse.com" date="1460462400">- version update to 1.7.7 (FATE#319553)
  - for changes see lsvpd-1.7.7/ChangeLog</changelog>
  <changelog author="jloeser@suse.com" date="1490616000">- version update to 1.7.8 (fate#321440, fate#322222)
  - Remove temporary block file creation under /tmp
  - Various bug fixes</changelog>
  <changelog author="jloeser@suse.com" date="1513598400">- bug fixes (bsc#1072079)
  - Add host number in device location code to distinguish
    different devices
  - Add workaround for std::ios_base::failure issue
- added patches:
  * lsvpd.bug-1072079_add_host_number.patch
  * lsvpd.bug-1072079_std_io_base_failure_workaround.patch</changelog>
  <changelog author="jloeser@suse.com" date="1529496000">- version update to 1.7.9 (fate#324941, fate#326426)
  - vpdupdate: Remove old archive db
  - Add support to parse OPFR record format
  - lsmcode: Add product version string to firmware information
  - lsmcode: Support firmware info on BMC based Power9 system
- removed patches:
  * lsvpd.bug-1072079_add_host_number.patch
  * lsvpd.bug-1072079_std_io_base_failure_workaround.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1572868800">- Upgrade to 1.7.10
  * vpdupdate: Delete vpd.db when program gets aborted
  * Enable NVME f1h log page VPD information parsing
  [jsc#SLE-8327, bsc#1155795]</changelog>
  <changelog author="josef.moellers@suse.com" date="1587470400">- The lsvpd man page and --help are not in sync. The version and
  debug options were missing. This patch adds the two options to the
  man page.
  [bsc#1163284,
  bsc1163284-Add_version_and_debug_options_to_man_page.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1588766400">- Added "Recommends: hwdata" to prevent "usb.ids file not found"
  error message.
  [lsvpd.spec, bsc#1171188]</changelog>
  <changelog author="msuchanek@suse.com" date="1604577600">- Update to upstream version 1.7.11 (jsc#SLE-12938).
  * lsvpd: Dont byteswap the CD field in Description
  * nvme: Update config file with f1h Logpage version 0002
  * lsvpd: Add version and debug options to man page
  - Drop upstreamed patch bsc1163284-Add_version_and_debug_options_to_man_page.patch
  - Update project URL</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Fix display of NVME adapter firmware version (bsc#1181336 ltc#190621).
  + lsvpd-nvme-Populate-NVMe-firmware-version.patch
  + lsvpd-sysvpd-Add-UUID-property.patch
  + lsvpd-sysfs-Fix-PCI-device-manufacturer-parsing-logic.patch</changelog>
  <changelog author="tabraham@suse.com" date="1624536000">- hwdata does not provide usb.ids in /usr/share so the solution
  implemented for bsc#1171188 is incomplete. Change expected location
  of pci.ids and usb.ids to /usr/share/hwdata/ (bsc#1187665)</changelog>
  <changelog author="msuchanek@suse.com" date="1628683200">- Update to version 1.7.12 (jsc#SLE-18188).
  - Drop upstreamed patches
  - lsvpd-nvme-Populate-NVMe-firmware-version.patch
  - lsvpd-sysvpd-Add-UUID-property.patch
  - lsvpd-sysfs-Fix-PCI-device-manufacturer-parsing-logic.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1632139200">- Update to version 1.7.13 (jsc#SLE-18188).
  - Fix support for SCSI loc code
- Remove obsolete BuildRoot and defattr</changelog>
  <changelog author="dimstar@opensuse.org" date="1640001600">- Fix build on UsrMerged distros: do not create symlinks in /sbin.</changelog>
  <changelog author="msuchanek@suse.com" date="1649937600">- Update to version 1.7.14
  - Prevent corruption of database file when running vpdupdate (bsc#1187665 ltc#194646)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="msuchanek@suse.com" date="1676548800">- Fix NVMe information parsing for some devices (bsc#1208122 ltc#200118)
  + lsvpd-Add-NVME-f1h-log-page-VPD-information-parsing-.patch
  + lsvpd-Update-nvme_template-with-logpage-format-for-0.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1680523200">- Fix NVMe information parsing with newer firmware (bsc#1208122 ltc#200118)
  + lsvpd-Update-nvme_templates-with-logpage-format-for-.patch</changelog>
</package>
<package pkgid="901434a8370653ef01c959ca19822b7dbddfa8d5ec7099df957fdb9453544bbd" name="lsvpd" arch="src">
  <version epoch="0" ver="1.7.14" rel="150400.3.10.1"/>
  <changelog author="mpluskal@suse.com" date="1429531200">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jloeser@suse.com" date="1440763200">- support lsvpd on PowerKVM guest (bsc#941938)
- added patches:
  * lsvpd.bug-941938_add_powerkvm_guest_detection1.patch
  * lsvpd.bug-941938_add_powerkvm_guest_detection2.patch</changelog>
  <changelog author="p.drouand@gmail.com" date="1447070400">- Update to version 1.7.6
  * lsmcode is enhanced to support OpenPower systems
  * Fixed security issues like buffer overflow, memory allocation
    validation
  * Improved error handling
- Remove dependency on fillup and insserv; the package doesn't contain
  any sysvinit nor sysconfig file
- Remove patches; fixed on upstream release
  * lsvpd.no-return-in-nonvoid-function.patch
  * lsvpd.bug-941938_add_powerkvm_guest_detection1.patch
  * lsvpd.bug-941938_add_powerkvm_guest_detection2.patch</changelog>
  <changelog author="jloeser@suse.com" date="1460462400">- version update to 1.7.7 (FATE#319553)
  - for changes see lsvpd-1.7.7/ChangeLog</changelog>
  <changelog author="jloeser@suse.com" date="1490616000">- version update to 1.7.8 (fate#321440, fate#322222)
  - Remove temporary block file creation under /tmp
  - Various bug fixes</changelog>
  <changelog author="jloeser@suse.com" date="1513598400">- bug fixes (bsc#1072079)
  - Add host number in device location code to distinguish
    different devices
  - Add workaround for std::ios_base::failure issue
- added patches:
  * lsvpd.bug-1072079_add_host_number.patch
  * lsvpd.bug-1072079_std_io_base_failure_workaround.patch</changelog>
  <changelog author="jloeser@suse.com" date="1529496000">- version update to 1.7.9 (fate#324941, fate#326426)
  - vpdupdate: Remove old archive db
  - Add support to parse OPFR record format
  - lsmcode: Add product version string to firmware information
  - lsmcode: Support firmware info on BMC based Power9 system
- removed patches:
  * lsvpd.bug-1072079_add_host_number.patch
  * lsvpd.bug-1072079_std_io_base_failure_workaround.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1572868800">- Upgrade to 1.7.10
  * vpdupdate: Delete vpd.db when program gets aborted
  * Enable NVME f1h log page VPD information parsing
  [jsc#SLE-8327, bsc#1155795]</changelog>
  <changelog author="josef.moellers@suse.com" date="1587470400">- The lsvpd man page and --help are not in sync. The version and
  debug options were missing. This patch adds the two options to the
  man page.
  [bsc#1163284,
  bsc1163284-Add_version_and_debug_options_to_man_page.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1588766400">- Added "Recommends: hwdata" to prevent "usb.ids file not found"
  error message.
  [lsvpd.spec, bsc#1171188]</changelog>
  <changelog author="msuchanek@suse.com" date="1604577600">- Update to upstream version 1.7.11 (jsc#SLE-12938).
  * lsvpd: Dont byteswap the CD field in Description
  * nvme: Update config file with f1h Logpage version 0002
  * lsvpd: Add version and debug options to man page
  - Drop upstreamed patch bsc1163284-Add_version_and_debug_options_to_man_page.patch
  - Update project URL</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Fix display of NVME adapter firmware version (bsc#1181336 ltc#190621).
  + lsvpd-nvme-Populate-NVMe-firmware-version.patch
  + lsvpd-sysvpd-Add-UUID-property.patch
  + lsvpd-sysfs-Fix-PCI-device-manufacturer-parsing-logic.patch</changelog>
  <changelog author="tabraham@suse.com" date="1624536000">- hwdata does not provide usb.ids in /usr/share so the solution
  implemented for bsc#1171188 is incomplete. Change expected location
  of pci.ids and usb.ids to /usr/share/hwdata/ (bsc#1187665)</changelog>
  <changelog author="msuchanek@suse.com" date="1628683200">- Update to version 1.7.12 (jsc#SLE-18188).
  - Drop upstreamed patches
  - lsvpd-nvme-Populate-NVMe-firmware-version.patch
  - lsvpd-sysvpd-Add-UUID-property.patch
  - lsvpd-sysfs-Fix-PCI-device-manufacturer-parsing-logic.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1632139200">- Update to version 1.7.13 (jsc#SLE-18188).
  - Fix support for SCSI loc code
- Remove obsolete BuildRoot and defattr</changelog>
  <changelog author="dimstar@opensuse.org" date="1640001600">- Fix build on UsrMerged distros: do not create symlinks in /sbin.</changelog>
  <changelog author="msuchanek@suse.com" date="1649937600">- Update to version 1.7.14
  - Prevent corruption of database file when running vpdupdate (bsc#1187665 ltc#194646)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="msuchanek@suse.com" date="1676548800">- Fix NVMe information parsing for some devices (bsc#1208122 ltc#200118)
  + lsvpd-Add-NVME-f1h-log-page-VPD-information-parsing-.patch
  + lsvpd-Update-nvme_template-with-logpage-format-for-0.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1680523200">- Fix NVMe information parsing with newer firmware (bsc#1208122 ltc#200118)
  + lsvpd-Update-nvme_templates-with-logpage-format-for-.patch</changelog>
</package>
<package pkgid="8b1443c121e4e3859c4169a10d4039c01ba5ab38fdb8b9839f52d72873286d5d" name="lua-clingo" arch="aarch64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="50f3ea4e1412b27095c7f08d6b98778a6263b243a60c7891927525f58b4bf14f" name="lua-clingo" arch="ppc64le">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="10f8d4cbf78bd64837aa33eec857c7d330b93a65fe604adc27572f585f746841" name="lua-clingo" arch="s390x">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="601c1570cbda9e974b504bce17706bf817690180807935d79ddf1a27b84d777c" name="lua-clingo" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="d22451119e55173494aa78666f7c8c3f19f09d900fee2eacb790dd7174088d43" name="luajit" arch="aarch64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="363e583142eaec1acda1c314916becb0bd270f793813cf642eb8126c2a95e7e5" name="luajit" arch="ppc64le">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="4500da232659f456823563ce704e6d68bb7d0ec5a4a5ffc3d4eff5ea65dea595" name="luajit" arch="s390x">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="416e72816c876cca8ff8018438a836515eaa217fc3ca61c14749f57c70dd44d5" name="luajit" arch="src">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="c90098b0099e0aa326524d83d7818838d09fc430f66da28a8bfdddfc26e50ac2" name="luajit" arch="x86_64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="d3c05a08e27a5b3f98f6ca3de39774469ce540e36ead8a0656b67e4182376891" name="luajit-devel" arch="aarch64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="0e6acf9f3b678a955711bdb88c45b98ab0418457e9e4d51718d0e9fc38382eb7" name="luajit-devel" arch="ppc64le">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="732f19fcbf63405ea124fd5e8fbc318f3ca444f02f931590956b3a81e1744bcf" name="luajit-devel" arch="s390x">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="3147701d10b065d9dcd597e4bf1a1c37824e09af8cf17bde5de5a11c7cf321cb" name="luajit-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0~beta3+git.1624618403.e9577376" rel="150400.4.2.1"/>
  <changelog author="munix9@googlemail.com" date="1624536000">- Update to version 2.1.0~beta3+git291.3f9389ed:
  * Throw any errors before stack changes in trace stitching.
  * DynASM/x86: Add missing escape in pattern.
  * Fix HTML.
  * String buffers, part 2e: add serialization string dictionary.
  * DynASM/ARM64: Fix LSL/BFI* encoding with variable shifts.
  * Fix MinGW static build.
  * Fix dependencies.
  * Fix IR_BUFHDR assembly.</changelog>
  <changelog author="munix9@googlemail.com" date="1624968000">- Update to version 2.1.0~beta3+git294.e9577376:
  * Disable unreliable assertion for external frame unwinding.
  * Flush and close output file after profiling run.
  * Avoid conflict between 64 bit lightuserdata and ITERN key.</changelog>
  <changelog author="mcepl@suse.com" date="1626091200">- Clean up SPEC. We don't need update-alternatives after all.</changelog>
  <changelog author="mgorse@suse.com" date="1633608000">- Exclude s390x for now. There is a not-yet-upstreamed port
  available, but we would need to rebase it for our release.</changelog>
  <changelog author="mgorse@suse.com" date="1635163200">- Add luajit-ppc64-remove-asserts.patch: remove calls to
  lua_assert. Fixes the build with our revision (bsc#1191615).
- Add luajit-s390x.patch: add s390x support, based on Fedora's
  patch and ported to our revision.
- Remove ExcludeArch, since package currently builds on s390x.</changelog>
  <changelog author="fvogt@suse.com" date="1635336000">- Replace luajit-ppc64-remove-asserts.patch with
  luajit-ppc64-replace-asserts.patch to use the proper assert
  functions instead of removing them.</changelog>
</package>
<package pkgid="3af793c8f9647701c9e1bacbb1684eaaace6a0558135f7d4891ae3151945f620" name="mariadb" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="1ed5356c485516e3ff7c0bdd597e77fca08ffe5e8173a51502ceb436567d945f" name="mariadb" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="952f1d67a538060d039ff4dc53f4c24af4ae91e8b48d371ad3e6fd8931a0b6a0" name="mariadb" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="4bae0ed92cdec3eb9cb7c069a1e92e39db7b51417309a218392d2567f29e86da" name="mariadb" arch="src">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="5243e2b58d620c0df6f3af171d718a9fa3bb817b6530b6c411842b9fbf383b99" name="mariadb" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="4227738229b76ace73ccc12d5c8cc04cb937db1cb194060f79304dc99055bd0e" name="mariadb" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="f0ef60e9f399cf566ba50698f67ad1fa7fcb854fa307a0c090aa951fe156f61c" name="mariadb" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="231bd2eeab4c057871da89edc7649bb3fd4e035caf02a1ccb198551ec367c6df" name="mariadb" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="097c9b876b33a3ad5b2329de4f5792c65ee9b51a00990db927329285b2f67507" name="mariadb" arch="src">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="e5eb0943f95677d7b671cb42a59c643cd91ea92c2595ed6e34731ab157818564" name="mariadb" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="68dfe0fa4ef7998da665ba9dbb3d0076aab211fa79f36d923b1458ae82cf26a3" name="mariadb-bench" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="3481bdb1ba36d418b23ededd186268950a27be4c75f1b9d88cd6ab7e45a37c2f" name="mariadb-bench" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="a393c9092e8a9fccf385f37f2cadcba21237fd86ff65e552a729764a724d5053" name="mariadb-bench" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="d94e57d6e6a30f144262ec48953cbc29bab08d03cdfe00caee9c443ddafb0020" name="mariadb-bench" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="ff9391595c66529a4b3985e4f904e1f9175e988cd87cf8e16383d1f3a9c4b810" name="mariadb-bench" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="96a65bc76a0ff7509692af1f9dec3ed56f2a9b263bd1788548f73fabd34351f0" name="mariadb-bench" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="4316199f646d0590eff1168bf099bf7f131a87ad593db1cd25944c836978707f" name="mariadb-bench" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="d2a221d4654a87599a29def2c7192debdce8651143aa197e56236b992b1eff32" name="mariadb-bench" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="0bc2b370080ee90e0c987a39aecbe91d35e2e8e2c1007ca7e875cdd6141797bd" name="mariadb-client" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="2507e45f13e98da6ebfe407ac2088626efb6318e80aad083e856a147a3433c3d" name="mariadb-client" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="49921c5b988c10ce49b9d887a2ce4dd7421f6ccae56fb18e76e5a3fd2a910c81" name="mariadb-client" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="3d0c974373ba29680310c0e97840deac26879f858e7d7ed90db35061305db4b2" name="mariadb-client" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="8b8b646e3e7339a2a03b8eba95540fa9070939938cc96c4d771f020180034830" name="mariadb-client" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="dbf26e8a33ca6f0c34ebd819665f099fd66fd54086c2f293cf92907ce9885b4e" name="mariadb-client" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="1f094bc96b865bbd32cf862f2c3108a8fd0876f38516b2728d6bf7953cb9efb1" name="mariadb-client" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="9a082c0d9131841192e98aa92bb21243a4db0e41aeebe4413ea94ff87b2bc229" name="mariadb-client" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="fabaa1a7f2788308bc9e65e918e2dee075b65fc7186200098bc335eac250a493" name="mariadb-errormessages" arch="noarch">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="de76ee04ce27deb3ec364a9b96f792ee222f07fd677e6fe56aa1ce05041a2984" name="mariadb-errormessages" arch="noarch">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="96ad51c1980029a3d159eb61792f605292a5a623188b4dfb751c3291fa37bb3e" name="mariadb-galera" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="f5a3d799e06cecdc49b537a2d096910ae705c37b0e729724bc4ebd491d2812b4" name="mariadb-galera" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="5be70450397268698d9a89a13d05fd4493bac3e5dc14a4054cf476f30afef14d" name="mariadb-galera" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="2c5b09834e1c80ef2eb445b549f45713179e1b454bfd6e7370a1d136d04bf650" name="mariadb-galera" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="4fad8e5cd79c583cd461b5b25e00843642b298aefa922fafd536b520dd6c696b" name="mariadb-galera" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="4139156513a5cf488dfd1e57de0af0a0fcb9393e13617d9eaecb050384fb1448" name="mariadb-galera" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="d6354974d4e8472ecfd6aa49ded50505078b885fd5da0cbc5d1e25a9019c90d2" name="mariadb-galera" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="cce9951d82d8f8df26be04b46ea62a51a6169987f1d2459df4fe0fa47999e329" name="mariadb-galera" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="3b7406bb38d8a1b90c92eb6634143e46ac84658844c462d7337cc84956cb38ca" name="mariadb-rpm-macros" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="664b86326113db8d9e308c265fdd1e0525f554d91eb3da49e1bc44950a1b0180" name="mariadb-rpm-macros" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="907d15cbecbebf2b8406237079931f3a2a63ccc764f71d9c26d51ec5915a3fbd" name="mariadb-rpm-macros" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="7ae0250112cb0dea532885ffed2fe05a593a6483f4ebdc33e3174480bc574cfc" name="mariadb-rpm-macros" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="8e2ce355567f6d148c947fa568f6e87970068910bb2cec627db26d1aacc73760" name="mariadb-rpm-macros" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="ba2ccde75d02b491f5f150d4c156c0926bd8f7c8031305d56ebb4faf6664097d" name="mariadb-rpm-macros" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="532ed5ce54cfd96889e028aa8c1529868bd8308758ee18da7b1f65073327e6ba" name="mariadb-rpm-macros" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="e6b6a84a8e206630d0f7c8891802900df992deb0e9465859b855e1b62637aa60" name="mariadb-rpm-macros" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="7c2d491b25ad0ebda5202671aa90b9250975ebd0a674c668ad9a81dd55112ce0" name="mariadb-test" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="9cfd993d24cf8a439543ead9011f16444414291576f0f5c51247a59a0974d96d" name="mariadb-test" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="21f21423f41e76d8ebe3345a8405a53ff80557b25abae5d243144a4dc92beef4" name="mariadb-test" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="e644c7b2b6221c38a30c9a0fb3fb3e0fba26212aeddb0175b068da10ba7aa68a" name="mariadb-test" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="653ff2a61cb78f16dab21985f760490276461738474c4855b71c80a734507f12" name="mariadb-test" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="7776933abbcbba61c4841febf0c86d7b624b16c2c8711f5f4321daf20bc242cd" name="mariadb-test" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="51e1c39942717893b5faa634f09025814a0b2ff120fec6b4b312d2b5fe898a0c" name="mariadb-test" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="be0c65a56b9fa1f15bd77122da8408d37f24469174676cb716370fd66d7e4696" name="mariadb-test" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="6105f011e5e7503dae14255ac1d5023712934a6ad9d7873af46bda54f6e577ed" name="mariadb-tools" arch="aarch64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="269e5c79adc206a7dfcf0af5fe394f1bbd12d74e358e39d92d081c933c70be60" name="mariadb-tools" arch="ppc64le">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="e29912271d78763c6cb35c374cf93c580d36a219b6e05828890224efe43b9ca0" name="mariadb-tools" arch="s390x">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="9dd8c072bb32460b15acb24ec8a66aa038f99e42471edd9b30522f9116f0149a" name="mariadb-tools" arch="x86_64">
  <version epoch="0" ver="10.6.13" rel="150400.3.23.1"/>
  <changelog author="mliska@suse.cz" date="1629460800">- Support both rpmlint 1.x and 2.x.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
</package>
<package pkgid="bd047f4cb53d50fff652067e17ac5e419b07a76dc2c144d9ae7a7ad1b63221a1" name="mariadb-tools" arch="aarch64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="be3786f5ea3258da606233a262d0699dff755110768d7410a881c4980bccd2d9" name="mariadb-tools" arch="ppc64le">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="5a942363d7e1f49a5ad4642d9fe57b05f5580fa64d966f766666275e346d40c4" name="mariadb-tools" arch="s390x">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="7c893bf5ecb29d4c301dbc39fdf15fc685363ea78dc6910740a1f69ef5aae5d0" name="mariadb-tools" arch="x86_64">
  <version epoch="0" ver="10.6.14" rel="150400.3.26.1"/>
  <changelog author="danilo.spinella@suse.com" date="1630929600">- Update to 10.6.4
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1064-release-notes
    https://mariadb.com/kb/en/library/mariadb-1064-changelog
    https://mariadb.com/kb/en/library/mariadb-1063-release-notes
    https://mariadb.com/kb/en/library/mariadb-1063-changelog
    https://mariadb.com/kb/en/library/mariadb-1062-release-notes
    https://mariadb.com/kb/en/library/mariadb-1062-changelog
    https://mariadb.com/kb/en/library/mariadb-1061-release-notes
    https://mariadb.com/kb/en/library/mariadb-1061-changelog
    https://mariadb.com/kb/en/library/mariadb-1060-release-notes
    https://mariadb.com/kb/en/library/mariadb-1060-changelog
  * fixes for the following security vulnerabilities:
    10.6.4: CVE-2021-2372
    CVE-2021-2389
- Removed support to tokudb as it has been removed from upstream
- Refresh mariadb-10.2.4-fortify-and-O.patch
- Add new systemd socket from upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1632139200">- Replace %{_rpmconfigdir}/macros.d with %{_rpmmacrodir},
  remove ownership of this directory. Fixes boo#1182218
- Run spec-cleaner</changelog>
  <changelog author="jsegitz@suse.com" date="1633521600">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_mariadb.service.patch
  Modified:
  * mariadb.service.in</changelog>
  <changelog author="danilo.spinella@suse.com" date="1633608000">- Fix socket address in mariadb@.socket file</changelog>
  <changelog author="suse-beta@cboltz.de" date="1635681600">- Add func_math_tests_MDEV-26645.diff to avoid test failures in the func_math
  test on Tumbleweed s390x and ppc64 until MDEV-26645 gets fixed upstream</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636372800">- Use pam macros instead of hardcoding directories, fixes bsc#1191038
- Add fix-pamdir.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636459200">- Update to 10.6.5
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1065-release-notes
    https://mariadb.com/kb/en/library/mariadb-1065-changelog
  * fixes for the following security vulnerabilities:
    10.6.5: none
- Not affected by [CVE-2021-35604], bsc#1192497
- Drop upstreamed patch:
  * mariadb-10.2.19-link-and-enable-c++11-atomics.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636718400">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977600">- Revert systemd hardening
  * Remove harden_mariadb.service.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1636977601">- Enable LZ4 compression for INNODB and ROCKSDB, fixes bsc#1186031</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637064000">- Fix rpmlint errors
- Run spec-cleaner</changelog>
  <changelog author="danilo.spinella@suse.com" date="1637582400">- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  bsc#1189320
  CVE-2021-2154, bsc#1185872
  CVE-2021-2166, bsc#1185870
  CVE-2021-27928, bsc#1183770
  MDEV-23851</changelog>
  <changelog author="danilo.spinella@suse.com" date="1645012800">- Update to 10.6.7 (bsc#1196016):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1067-release-notes
    https://mariadb.com/kb/en/library/mariadb-1067-changelog
    https://mariadb.com/kb/en/library/mariadb-1066-release-notes
    https://mariadb.com/kb/en/library/mariadb-1066-changelog
  * fixes for the following security vulnerabilities:
    10.6.7: CVE-2021-46665
    CVE-2021-46664
    CVE-2021-46661
    CVE-2021-46668
    CVE-2021-46663
    10.6.6: CVE-2022-24052
    CVE-2022-24051
    CVE-2022-24050
    CVE-2022-24048
    CVE-2021-46659, bsc#1195339
- Skip failing tests for s390x, fixes bsc#1195076
  * suse_skipped_tests.list
- Remove upstreamed patches:
  * mariadb-10.0.15-logrotate-su.patch
  * mariadb-10.1.1-mysqld_multi-features.patch
- Refresh mariadb-10.2.4-logrotate.patch
- The following issues have already been fixed in this package but weren't
  previously mentioned in the changes file:
  CVE-2021-46658, bsc#1195334
  CVE-2021-46657, bsc#1195325</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646740800">- Build mariadb-galera on SLE (jsc#SLE-22245)
- Add dependency on galera-4 for mariadb-galera
- Remove old constraints for mariadb-galera</changelog>
  <changelog author="danilo.spinella@suse.com" date="1653566400">- Update to 10.6.8 (bsc#1199928):
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1068-release-notes
    https://mariadb.com/kb/en/library/mariadb-1068-changelog
  * fixes for the following security vulnerabilities:
    10.6.8:  CVE-2021-46669
    CVE-2022-27376 (bsc#1198628)
    CVE-2022-27377 (bsc#1198603)
    CVE-2022-27378 (bsc#1198604)
    CVE-2022-27379 (bsc#1198605)
    CVE-2022-27380 (bsc#1198606)
    CVE-2022-27381 (bsc#1198607)
    CVE-2022-27382 (bsc#1198609)
    CVE-2022-27383 (bsc#1198610)
    CVE-2022-27384 (bsc#1198611)
    CVE-2022-27386 (bsc#1198612)
    CVE-2022-27387 (bsc#1198613)
    CVE-2022-27444 (bsc#1198634)
    CVE-2022-27445 (bsc#1198629)
    CVE-2022-27446 (bsc#1198630)
    CVE-2022-27447 (bsc#1198631)
    CVE-2022-27448 (bsc#1198632)
    CVE-2022-27449 (bsc#1198633)
    CVE-2022-27451 (bsc#1198639)
    CVE-2022-27452 (bsc#1198640)
    CVE-2022-27455 (bsc#1198638)
    CVE-2022-27456 (bsc#1198635)
    CVE-2022-27457 (bsc#1198636)
    CVE-2022-27458 (bsc#1198637)
    CVE-2022-32088 (bsc#1201168)
    CVE-2022-32087 (bsc#1201167)
    CVE-2022-32086 (bsc#1201166)
    CVE-2022-32085 (bsc#1201165)
    CVE-2022-32083 (bsc#1201163)
- Update list of skipped tests
- The following issue is not affecting this package:
  * CVE-2022-21427</changelog>
  <changelog author="danilo.spinella@suse.com" date="1661774400">- Update to 10.6.9:
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-1069-release-notes
    https://mariadb.com/kb/en/library/mariadb-1069-changelog
  * fixes for the following security vulnerabilities:
    10.6.9: CVE-2022-32082 (bsc#1201162)
    CVE-2022-32089 (bsc#1201169)
    CVE-2022-32081 (bsc#1201161)
    CVE-2022-32091 (bsc#1201170)
    CVE-2022-32084 (bsc#1201164)
    CVE-2022-38791 (bsc#1202863)
  * The package is not affected by the following security vulnerabilities:
    CVE-2018-25032 (bsc#1197459)
- Update mysql-systemd-helper to be aware of custom group, bsc#1200105
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1663761600">- Update to 10.6.10:
    https://mariadb.com/kb/en/library/mariadb-10610-release-notes
    https://mariadb.com/kb/en/library/mariadb-10610-changelog
  * fixes for the following security vulnerabilities:
    10.6.10: none</changelog>
  <changelog author="danilo.spinella@suse.com" date="1677585600">- Update to 10.6.12:
    https://mariadb.com/kb/en/library/mariadb-10612-release-notes
    https://mariadb.com/kb/en/library/mariadb-10612-changelog
    https://mariadb.com/kb/en/library/mariadb-10611-release-notes
    https://mariadb.com/kb/en/library/mariadb-10611-changelog
  * fixes for the following security vulnerabilities:
    10.6.12: none
    10.6.11: none
- Update mariadb.keyring
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1684843200">- Update to 10.6.13:
    https://mariadb.com/kb/en/mariadb-10-6-13-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-13-changelog/
  * fixes for the following security vulnerabilities:
    10.6.13: CVE-2022-47015 (bsc#1207404)
- Update list of skipped tests</changelog>
  <changelog author="danilo.spinella@suse.com" date="1687262400">- Update to 10.6.14:
    https://mariadb.com/kb/en/mariadb-10-6-14-release-notes/
    https://mariadb.com/kb/en/mariadb-10-6-14-changelog/
  * fixes for the following security vulnerabilities:
    10.6.14: none</changelog>
</package>
<package pkgid="8526496758dfad1af4cf20487fd72f219067b9182bcefc4b5ee528eb29e5820d" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.2" rel="150500.6.3.1"/>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1615982400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1633521600">- Install mdadm in _sbindir rather than /sbin.  This is more
  appropriate now that we have a merged-/usr.
  (bsc#1191076)</changelog>
  <changelog author="sweiberg@suse.com" date="1637668800">- Use %{_sbindir} for prerequisite of mkinitrd to work with
  usrmerge of dracut-mkinitrd-deprecated</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0121-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1667476800">- Update mdadm package to latest mdadm since mdadm-4.2
  (jsc#PED-1009, jsc#PED-947)
  * Only patches directly change runtime programs included,
  - Unify error message.
    0001-Unify-error-message.patch
  - mdadm: Fix double free
    0002-mdadm-Fix-double-free.patch
  - Grow_reshape: Add r0 grow size error message and update
    0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - udev: adapt rules to systemd v247
    0004-udev-adapt-rules-to-systemd-v247.patch
  - Replace error prone signal() with sigaction()
    0005-Replace-error-prone-signal-with-sigaction.patch
  - mdadm: Respect config file location in man
    0006-mdadm-Respect-config-file-location-in-man.patch
  - mdadm: Update ReadMe
    0007-mdadm-Update-ReadMe.patch
  - mdadm: Update config man regarding default files and
    0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - mdadm: Update config manual
    0009-mdadm-Update-config-manual.patch
  - Create, Build: use default_layout()
    0010-Create-Build-use-default_layout.patch
  - mdadm: add map_num_s()
    0011-mdadm-add-map_num_s.patch
  - mdmon: Stop parsing duplicate options
    0012-mdmon-Stop-parsing-duplicate-options.patch
  - Grow: block -n on external volumes.
    0013-Grow-block-n-on-external-volumes.patch
  - Incremental: Fix possible memory and resource leaks
    0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - Mdmonitor: Fix segfault
    0015-Mdmonitor-Fix-segfault.patch
  - Mdmonitor: Improve logging method
    0016-Mdmonitor-Improve-logging-method.patch
  - Fix possible NULL ptr dereferences and memory leaks
    0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - imsm: Remove possibility for get_imsm_dev to return
    0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - Revert "mdadm: fix coredump of mdadm --monitor -r"
    0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - util: replace ioctl use with function
    0020-util-replace-ioctl-use-with-function.patch
  - mdadm/super1: restore commit 45a87c2f31335 to fix
    0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - imsm: introduce get_disk_slot_in_dev()
    0022-imsm-introduce-get_disk_slot_in_dev.patch
  - imsm: use same slot across container
    0023-imsm-use-same-slot-across-container.patch
  - imsm: block changing slots during creation
    0024-imsm-block-changing-slots-during-creation.patch
  - mdadm: block update=ppl for non raid456 levels
    0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - mdadm: Fix array size mismatch after grow
    0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - mdadm: Remove dead code in imsm_fix_size_mismatch
    0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - Monitor: use devname as char array instead of pointer
    0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - Monitor: use snprintf to fill device name
    0029-Monitor-use-snprintf-to-fill-device-name.patch
  - Makefile: Don't build static build with everything and
    0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - DDF: Cleanup validate_geometry_ddf_container()
    0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - DDF: Fix NULL pointer dereference in
    0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - mdadm/Grow: Fix use after close bug by closing after
    0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - monitor: Avoid segfault when calling NULL
    0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - mdadm: Fix mdadm -r remove option regression
    0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - mdadm: Fix optional --write-behind parameter
    0036-mdadm-Fix-optional-write-behind-parameter.patch
  - mdadm: Replace obsolete usleep with nanosleep
    0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - mdadm: remove symlink option
    0038-mdadm-remove-symlink-option.patch
  - mdadm: move data_offset to struct shape
    0039-mdadm-move-data_offset-to-struct-shape.patch
  - mdadm: Don't open md device for CREATE and ASSEMBLE
    0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - Grow: Split Grow_reshape into helper function
    0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - Assemble: check if device is container before
    0042-Assemble-check-if-device-is-container-before-schedul.patch
  - super1: report truncated device
    0043-super1-report-truncated-device.patch
  - mdadm: Correct typos, punctuation and grammar in man
    0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - Manage: Block unsafe member failing
    0045-Manage-Block-unsafe-member-failing.patch
  - Monitor: Fix statelist memory leaks
    0046-Monitor-Fix-statelist-memory-leaks.patch
  - mdadm: added support for Intel Alderlake RST on VMD
    0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - mdadm: Add Documentation entries to systemd services
    0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - ReadMe: fix command-line help
    0049-ReadMe-fix-command-line-help.patch
  - mdadm: replace container level checking with inline
    0050-mdadm-replace-container-level-checking-with-inline.patch
  - Mdmonitor: Omit non-md devices
    0051-Mdmonitor-Omit-non-md-devices.patch
- Remove the following in house patch
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  because upstream merged version added in as
  0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
- Rename 0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
  to 1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.
- Update mdadm package to mdadm-4.2 (jsc#PED-1009, jsc#PED-947)
  All important modifications since previous update to mdadm-4.2
  are listed here.
  * The patches about Intel Matrix Storage Manager (including
    VROC support),
  - super-intel.c: Handle errors from calls to get_dev_sector_size()
  - imsm: change wrong size verification
  - imsm: add generic method to resolve "device" links
  - imsm: add devpath_to_char method
  - imsm: Limit support to the lowest namespace
  - imsm: correct offset for 4k disks in --examine output
  - imsm: Fix possible memory leaks and refactor freeing struct dl
  - imsm: fix num_data_stripes after raid0 takeover
  - imsm: introduce helpers to manage file descriptors
  - imsm: free allocated memory in imsm_fix_size_mismatch
  - imsm: assert if there is migration but prev_map doesn't exist
  * The patches to fix program issues,
  - mdadm/super1: It needs to specify int32 for bitmap_offset
  - Fix memory leak after "mdadm --detail"
  - Utils: Change sprintf to snprintf
  - mdadm: fix coredump of mdadm --monitor -r
  - Fix error message when creating raid 4, 5 and 10
  - Fix buffer size warning for strcp
  - Fix potential overlap dest buffer
  - Correct checking if file descriptors are valid
  - Monitor: print message before quit for no array to monitor
  * Improvement or bug fixes for mdadm itself,
  - Assemble: skip devices that don't match uuid instead of aborting the
    assembly.
  - Assemble: apply sysfs rules
  - Assemble: start dirty and degraded array.
  - Incremental: Close unclosed mdfd in IncrementalScan()
  - Monitor: make libudev dependency optional
  - Manage: Call validate_geometry when adding drive to external
    container
  - Remove Spare drives line from details for external metadata
  - Don't associate spares with other arrays during RAID Examine
  - Add error handling for chunk size in RAID1
  - Add monitor delay parameter to mdadm.conf
  - disallow create or grow clustered bitmap with writemostly set
  - mdadm/Detail: Can't show container name correctly when unpluging disks
  - mdadm: block creation with long names
  - mdadm: fix growing containers
- Remove the following patches because they are all included
  in mdadm-4.2,
  - 0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
  - 0002-Document-PART-POLICY-lines.patch
  - 0003-policy-support-devices-with-multiple-paths.patch
  - 0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
  - 0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
  - 0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
  - 0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
  - 0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
  - 0009-Grow-report-correct-new-chunk-size.patch
  - 0010-policy.c-prevent-NULL-pointer-referencing.patch
  - 0012-policy.c-Fix-for-compiler-error.patch
  - 0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
  - 0014-imsm-fix-reshape-for-2TB-drives.patch
  - 0015-Fix-spelling-typos.patch
  - 0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
  - 0018-Fix-reshape-for-decreasing-data-offset.patch
  - 0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
  - 0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
  - 0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
  - 0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
  - 0023-add-missing-units-to-examine.patch
  - 0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
  - 0025-Create-Block-rounding-size-to-max.patch
  - 0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
  - 0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
  - 0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
  - 0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
  - 0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
  - 0031-super-intel-Use-put_unaligned-in-split_ull.patch
  - 0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
  - 0033-mdadm.h-include-sysmacros.h-unconditionally.patch
  - 0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  - 0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  - 0036-imsm-close-removed-drive-fd.patch
  - 0037-mdadm-check-value-returned-by-snprintf-against-error.patch
  - 0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
  - 0039-mdadm-force-a-uuid-swap-on-big-endian.patch
  - 0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
  - 0041-Init-devlist-as-an-array.patch
  - 0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
  - 0043-udev-allow-for-udev-attribute-reading-bug.patch
  - 0044-imsm-save-current_vol-number.patch
  - 0045-imsm-allow-to-specify-second-volume-size.patch
  - 0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  - 0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
  - 0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  - 0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
  - 0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
  - 0054-Remove-last-traces-of-HOT_ADD_DISK.patch
  - 0055-Fix-up-a-few-formatting-issues.patch
  - 0056-Remove-unused-code.patch
  - 0057-imsm-return-correct-uuid-for-volume-in-detail.patch
  - 0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
  - 0059-Create-add-support-for-RAID0-layouts.patch
  - 0060-Assemble-add-support-for-RAID0-layouts.patch
  - 0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
  - 0062-Change-warning-message.patch
  - 0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
  - 0064-imsm-Update-grow-manual.patch
  - 0065-Add-support-for-Tebibytes.patch
  - 0066-imsm-fill-working_disks-according-to-metadata.patch
  - 0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
  - 0068-Remove-the-legacy-whitespace.patch
  - 0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
  - 0070-imsm-Remove-dump-restore-implementation.patch
  - 0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch
  - 0072-Detail-adding-sync-status-for-cluster-device.patch
  - 0073-imsm-Correct-minimal-device-size.patch
  - 0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
  - 0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
  - 0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
  - 0077-udev-Ignore-change-event-for-imsm.patch
  - 0078-Manage-imsm-Write-metadata-before-add.patch
  - 0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
  - 0080-clean-up-meaning-of-small-typo.patch
  - 0081-Assemble.c-respect-force-flag.patch
  - 0082-mdcheck-Log-when-done.patch
  - 0083-Makefile-add-EXTRAVERSION-support.patch
  - 0084-uuid.c-split-uuid-stuffs-from-util.c.patch
  - 0085-Include-count-for-0-character-when-using-strncpy-to-.patch
  - 0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
  - 0087-Block-overwriting-existing-links-while-manual-assemb.patch
  - 0088-Detect-too-small-device-error-rather-than-underflow-.patch
  - 0089-Use-more-secure-HTTPS-URLs.patch
  - 0090-Update-link-to-Intel-page-for-IMSM.patch
  - 0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
  - 0092-Specify-nodes-number-when-updating-cluster-nodes.patch
  - 0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
  - 0094-manual-update-examine-badblocks.patch
  - 0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
  - 0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
  - 0097-Monitor-refresh-mdstat-fd-after-select.patch
  - 0098-Monitor-stop-notifing-about-containers.patch
  - 0099-mdmonitor-set-small-delay-once.patch
  - 0100-Check-if-other-Monitor-instance-running-before-fork.patch
  - 0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
  - 0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
  - 0103-Create.c-close-mdfd-and-generate-uevent.patch
  - 0104-imsm-update-num_data_stripes-according-to-dev_size.patch
  - 0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
  - 0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
  - 0107-imsm-limit-support-to-first-NVMe-namespace.patch
  - 0108-mdadm-Unify-forks-behaviour.patch
  - 0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
  - 0110-Make-target-to-install-binaries-only.patch
  - 0111-udev-start-grow-service-automatically.patch
  - 0112-Incremental-Remove-redundant-spare-movement-logic.patch
  - 0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch
  - 0114-super1-fix-Floating-point-exception.patch
  - 0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch
  - 0116-imsm-nvme-multipath-support.patch
  - 0117-Grow-be-careful-of-corrupt-dev_roles-list.patch
  - 0118-Remove-Spare-drives-line-from-details-for-external-m.patch
  - 0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch
  - 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch
  - 0121-imsm-support-for-third-Sata-controller.patch
- The patch from SLE15-SP4 is removed because it is in mdadm-4.2
  upstream already,
  - Monitor: print message before quit for no array to monitor
    (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="colyli@suse.com" date="1669291200">- mdadm.spec: remove "PreReq: %{_sbindir}/mkinitrd" as it is
  unnecessary now. (bsc#1202352)</changelog>
  <changelog author="colyli@suse.com" date="1669291201">- Call mdadm_env.sh from /usr/libexec/mdadm (bsc#1111960, bsc#1202090)
  1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The patch (bsc#1111960) which fixed rpm check failure is replaced
  by the above patch,
  1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.</changelog>
  <changelog author="colyli@suse.com" date="1670414400">- Drop the patch which is reported as regression by upstream developer
  (bsc#1206139)
  0045-Manage-Block-unsafe-member-failing.patch
- Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they
  are both the requirement to update mdadm to latest upstream state
  via different requestors.</changelog>
  <changelog author="colyli@suse.com" date="1672056000">- mdadm.spec: create the following symbolic link in /sbin for
  compatibility,
  /sbin/mdadm -&gt; /usr/sbin/mdadm
  /sbin/mdmon -&gt; /usr/sbin/mdmon
  (jsc#PED-1009, jsc#PED-947)</changelog>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
</package>
<package pkgid="a8860107e7a220d14cf8c3eb6e1c2e64325c1962f5d54742f3048c035b0a4d4b" name="mdadm" arch="ppc64le">
  <version epoch="0" ver="4.2" rel="150500.6.3.1"/>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1615982400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1633521600">- Install mdadm in _sbindir rather than /sbin.  This is more
  appropriate now that we have a merged-/usr.
  (bsc#1191076)</changelog>
  <changelog author="sweiberg@suse.com" date="1637668800">- Use %{_sbindir} for prerequisite of mkinitrd to work with
  usrmerge of dracut-mkinitrd-deprecated</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0121-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1667476800">- Update mdadm package to latest mdadm since mdadm-4.2
  (jsc#PED-1009, jsc#PED-947)
  * Only patches directly change runtime programs included,
  - Unify error message.
    0001-Unify-error-message.patch
  - mdadm: Fix double free
    0002-mdadm-Fix-double-free.patch
  - Grow_reshape: Add r0 grow size error message and update
    0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - udev: adapt rules to systemd v247
    0004-udev-adapt-rules-to-systemd-v247.patch
  - Replace error prone signal() with sigaction()
    0005-Replace-error-prone-signal-with-sigaction.patch
  - mdadm: Respect config file location in man
    0006-mdadm-Respect-config-file-location-in-man.patch
  - mdadm: Update ReadMe
    0007-mdadm-Update-ReadMe.patch
  - mdadm: Update config man regarding default files and
    0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - mdadm: Update config manual
    0009-mdadm-Update-config-manual.patch
  - Create, Build: use default_layout()
    0010-Create-Build-use-default_layout.patch
  - mdadm: add map_num_s()
    0011-mdadm-add-map_num_s.patch
  - mdmon: Stop parsing duplicate options
    0012-mdmon-Stop-parsing-duplicate-options.patch
  - Grow: block -n on external volumes.
    0013-Grow-block-n-on-external-volumes.patch
  - Incremental: Fix possible memory and resource leaks
    0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - Mdmonitor: Fix segfault
    0015-Mdmonitor-Fix-segfault.patch
  - Mdmonitor: Improve logging method
    0016-Mdmonitor-Improve-logging-method.patch
  - Fix possible NULL ptr dereferences and memory leaks
    0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - imsm: Remove possibility for get_imsm_dev to return
    0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - Revert "mdadm: fix coredump of mdadm --monitor -r"
    0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - util: replace ioctl use with function
    0020-util-replace-ioctl-use-with-function.patch
  - mdadm/super1: restore commit 45a87c2f31335 to fix
    0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - imsm: introduce get_disk_slot_in_dev()
    0022-imsm-introduce-get_disk_slot_in_dev.patch
  - imsm: use same slot across container
    0023-imsm-use-same-slot-across-container.patch
  - imsm: block changing slots during creation
    0024-imsm-block-changing-slots-during-creation.patch
  - mdadm: block update=ppl for non raid456 levels
    0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - mdadm: Fix array size mismatch after grow
    0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - mdadm: Remove dead code in imsm_fix_size_mismatch
    0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - Monitor: use devname as char array instead of pointer
    0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - Monitor: use snprintf to fill device name
    0029-Monitor-use-snprintf-to-fill-device-name.patch
  - Makefile: Don't build static build with everything and
    0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - DDF: Cleanup validate_geometry_ddf_container()
    0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - DDF: Fix NULL pointer dereference in
    0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - mdadm/Grow: Fix use after close bug by closing after
    0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - monitor: Avoid segfault when calling NULL
    0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - mdadm: Fix mdadm -r remove option regression
    0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - mdadm: Fix optional --write-behind parameter
    0036-mdadm-Fix-optional-write-behind-parameter.patch
  - mdadm: Replace obsolete usleep with nanosleep
    0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - mdadm: remove symlink option
    0038-mdadm-remove-symlink-option.patch
  - mdadm: move data_offset to struct shape
    0039-mdadm-move-data_offset-to-struct-shape.patch
  - mdadm: Don't open md device for CREATE and ASSEMBLE
    0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - Grow: Split Grow_reshape into helper function
    0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - Assemble: check if device is container before
    0042-Assemble-check-if-device-is-container-before-schedul.patch
  - super1: report truncated device
    0043-super1-report-truncated-device.patch
  - mdadm: Correct typos, punctuation and grammar in man
    0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - Manage: Block unsafe member failing
    0045-Manage-Block-unsafe-member-failing.patch
  - Monitor: Fix statelist memory leaks
    0046-Monitor-Fix-statelist-memory-leaks.patch
  - mdadm: added support for Intel Alderlake RST on VMD
    0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - mdadm: Add Documentation entries to systemd services
    0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - ReadMe: fix command-line help
    0049-ReadMe-fix-command-line-help.patch
  - mdadm: replace container level checking with inline
    0050-mdadm-replace-container-level-checking-with-inline.patch
  - Mdmonitor: Omit non-md devices
    0051-Mdmonitor-Omit-non-md-devices.patch
- Remove the following in house patch
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  because upstream merged version added in as
  0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
- Rename 0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
  to 1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.
- Update mdadm package to mdadm-4.2 (jsc#PED-1009, jsc#PED-947)
  All important modifications since previous update to mdadm-4.2
  are listed here.
  * The patches about Intel Matrix Storage Manager (including
    VROC support),
  - super-intel.c: Handle errors from calls to get_dev_sector_size()
  - imsm: change wrong size verification
  - imsm: add generic method to resolve "device" links
  - imsm: add devpath_to_char method
  - imsm: Limit support to the lowest namespace
  - imsm: correct offset for 4k disks in --examine output
  - imsm: Fix possible memory leaks and refactor freeing struct dl
  - imsm: fix num_data_stripes after raid0 takeover
  - imsm: introduce helpers to manage file descriptors
  - imsm: free allocated memory in imsm_fix_size_mismatch
  - imsm: assert if there is migration but prev_map doesn't exist
  * The patches to fix program issues,
  - mdadm/super1: It needs to specify int32 for bitmap_offset
  - Fix memory leak after "mdadm --detail"
  - Utils: Change sprintf to snprintf
  - mdadm: fix coredump of mdadm --monitor -r
  - Fix error message when creating raid 4, 5 and 10
  - Fix buffer size warning for strcp
  - Fix potential overlap dest buffer
  - Correct checking if file descriptors are valid
  - Monitor: print message before quit for no array to monitor
  * Improvement or bug fixes for mdadm itself,
  - Assemble: skip devices that don't match uuid instead of aborting the
    assembly.
  - Assemble: apply sysfs rules
  - Assemble: start dirty and degraded array.
  - Incremental: Close unclosed mdfd in IncrementalScan()
  - Monitor: make libudev dependency optional
  - Manage: Call validate_geometry when adding drive to external
    container
  - Remove Spare drives line from details for external metadata
  - Don't associate spares with other arrays during RAID Examine
  - Add error handling for chunk size in RAID1
  - Add monitor delay parameter to mdadm.conf
  - disallow create or grow clustered bitmap with writemostly set
  - mdadm/Detail: Can't show container name correctly when unpluging disks
  - mdadm: block creation with long names
  - mdadm: fix growing containers
- Remove the following patches because they are all included
  in mdadm-4.2,
  - 0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
  - 0002-Document-PART-POLICY-lines.patch
  - 0003-policy-support-devices-with-multiple-paths.patch
  - 0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
  - 0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
  - 0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
  - 0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
  - 0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
  - 0009-Grow-report-correct-new-chunk-size.patch
  - 0010-policy.c-prevent-NULL-pointer-referencing.patch
  - 0012-policy.c-Fix-for-compiler-error.patch
  - 0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
  - 0014-imsm-fix-reshape-for-2TB-drives.patch
  - 0015-Fix-spelling-typos.patch
  - 0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
  - 0018-Fix-reshape-for-decreasing-data-offset.patch
  - 0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
  - 0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
  - 0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
  - 0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
  - 0023-add-missing-units-to-examine.patch
  - 0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
  - 0025-Create-Block-rounding-size-to-max.patch
  - 0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
  - 0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
  - 0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
  - 0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
  - 0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
  - 0031-super-intel-Use-put_unaligned-in-split_ull.patch
  - 0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
  - 0033-mdadm.h-include-sysmacros.h-unconditionally.patch
  - 0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  - 0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  - 0036-imsm-close-removed-drive-fd.patch
  - 0037-mdadm-check-value-returned-by-snprintf-against-error.patch
  - 0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
  - 0039-mdadm-force-a-uuid-swap-on-big-endian.patch
  - 0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
  - 0041-Init-devlist-as-an-array.patch
  - 0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
  - 0043-udev-allow-for-udev-attribute-reading-bug.patch
  - 0044-imsm-save-current_vol-number.patch
  - 0045-imsm-allow-to-specify-second-volume-size.patch
  - 0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  - 0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
  - 0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  - 0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
  - 0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
  - 0054-Remove-last-traces-of-HOT_ADD_DISK.patch
  - 0055-Fix-up-a-few-formatting-issues.patch
  - 0056-Remove-unused-code.patch
  - 0057-imsm-return-correct-uuid-for-volume-in-detail.patch
  - 0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
  - 0059-Create-add-support-for-RAID0-layouts.patch
  - 0060-Assemble-add-support-for-RAID0-layouts.patch
  - 0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
  - 0062-Change-warning-message.patch
  - 0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
  - 0064-imsm-Update-grow-manual.patch
  - 0065-Add-support-for-Tebibytes.patch
  - 0066-imsm-fill-working_disks-according-to-metadata.patch
  - 0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
  - 0068-Remove-the-legacy-whitespace.patch
  - 0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
  - 0070-imsm-Remove-dump-restore-implementation.patch
  - 0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch
  - 0072-Detail-adding-sync-status-for-cluster-device.patch
  - 0073-imsm-Correct-minimal-device-size.patch
  - 0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
  - 0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
  - 0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
  - 0077-udev-Ignore-change-event-for-imsm.patch
  - 0078-Manage-imsm-Write-metadata-before-add.patch
  - 0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
  - 0080-clean-up-meaning-of-small-typo.patch
  - 0081-Assemble.c-respect-force-flag.patch
  - 0082-mdcheck-Log-when-done.patch
  - 0083-Makefile-add-EXTRAVERSION-support.patch
  - 0084-uuid.c-split-uuid-stuffs-from-util.c.patch
  - 0085-Include-count-for-0-character-when-using-strncpy-to-.patch
  - 0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
  - 0087-Block-overwriting-existing-links-while-manual-assemb.patch
  - 0088-Detect-too-small-device-error-rather-than-underflow-.patch
  - 0089-Use-more-secure-HTTPS-URLs.patch
  - 0090-Update-link-to-Intel-page-for-IMSM.patch
  - 0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
  - 0092-Specify-nodes-number-when-updating-cluster-nodes.patch
  - 0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
  - 0094-manual-update-examine-badblocks.patch
  - 0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
  - 0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
  - 0097-Monitor-refresh-mdstat-fd-after-select.patch
  - 0098-Monitor-stop-notifing-about-containers.patch
  - 0099-mdmonitor-set-small-delay-once.patch
  - 0100-Check-if-other-Monitor-instance-running-before-fork.patch
  - 0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
  - 0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
  - 0103-Create.c-close-mdfd-and-generate-uevent.patch
  - 0104-imsm-update-num_data_stripes-according-to-dev_size.patch
  - 0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
  - 0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
  - 0107-imsm-limit-support-to-first-NVMe-namespace.patch
  - 0108-mdadm-Unify-forks-behaviour.patch
  - 0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
  - 0110-Make-target-to-install-binaries-only.patch
  - 0111-udev-start-grow-service-automatically.patch
  - 0112-Incremental-Remove-redundant-spare-movement-logic.patch
  - 0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch
  - 0114-super1-fix-Floating-point-exception.patch
  - 0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch
  - 0116-imsm-nvme-multipath-support.patch
  - 0117-Grow-be-careful-of-corrupt-dev_roles-list.patch
  - 0118-Remove-Spare-drives-line-from-details-for-external-m.patch
  - 0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch
  - 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch
  - 0121-imsm-support-for-third-Sata-controller.patch
- The patch from SLE15-SP4 is removed because it is in mdadm-4.2
  upstream already,
  - Monitor: print message before quit for no array to monitor
    (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="colyli@suse.com" date="1669291200">- mdadm.spec: remove "PreReq: %{_sbindir}/mkinitrd" as it is
  unnecessary now. (bsc#1202352)</changelog>
  <changelog author="colyli@suse.com" date="1669291201">- Call mdadm_env.sh from /usr/libexec/mdadm (bsc#1111960, bsc#1202090)
  1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The patch (bsc#1111960) which fixed rpm check failure is replaced
  by the above patch,
  1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.</changelog>
  <changelog author="colyli@suse.com" date="1670414400">- Drop the patch which is reported as regression by upstream developer
  (bsc#1206139)
  0045-Manage-Block-unsafe-member-failing.patch
- Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they
  are both the requirement to update mdadm to latest upstream state
  via different requestors.</changelog>
  <changelog author="colyli@suse.com" date="1672056000">- mdadm.spec: create the following symbolic link in /sbin for
  compatibility,
  /sbin/mdadm -&gt; /usr/sbin/mdadm
  /sbin/mdmon -&gt; /usr/sbin/mdmon
  (jsc#PED-1009, jsc#PED-947)</changelog>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
</package>
<package pkgid="0a874658c64e6f644a4bf01b4ec7039e3b393c8dea9394a5c0dd31fe638a4d8d" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.2" rel="150500.6.3.1"/>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1615982400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1633521600">- Install mdadm in _sbindir rather than /sbin.  This is more
  appropriate now that we have a merged-/usr.
  (bsc#1191076)</changelog>
  <changelog author="sweiberg@suse.com" date="1637668800">- Use %{_sbindir} for prerequisite of mkinitrd to work with
  usrmerge of dracut-mkinitrd-deprecated</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0121-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1667476800">- Update mdadm package to latest mdadm since mdadm-4.2
  (jsc#PED-1009, jsc#PED-947)
  * Only patches directly change runtime programs included,
  - Unify error message.
    0001-Unify-error-message.patch
  - mdadm: Fix double free
    0002-mdadm-Fix-double-free.patch
  - Grow_reshape: Add r0 grow size error message and update
    0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - udev: adapt rules to systemd v247
    0004-udev-adapt-rules-to-systemd-v247.patch
  - Replace error prone signal() with sigaction()
    0005-Replace-error-prone-signal-with-sigaction.patch
  - mdadm: Respect config file location in man
    0006-mdadm-Respect-config-file-location-in-man.patch
  - mdadm: Update ReadMe
    0007-mdadm-Update-ReadMe.patch
  - mdadm: Update config man regarding default files and
    0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - mdadm: Update config manual
    0009-mdadm-Update-config-manual.patch
  - Create, Build: use default_layout()
    0010-Create-Build-use-default_layout.patch
  - mdadm: add map_num_s()
    0011-mdadm-add-map_num_s.patch
  - mdmon: Stop parsing duplicate options
    0012-mdmon-Stop-parsing-duplicate-options.patch
  - Grow: block -n on external volumes.
    0013-Grow-block-n-on-external-volumes.patch
  - Incremental: Fix possible memory and resource leaks
    0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - Mdmonitor: Fix segfault
    0015-Mdmonitor-Fix-segfault.patch
  - Mdmonitor: Improve logging method
    0016-Mdmonitor-Improve-logging-method.patch
  - Fix possible NULL ptr dereferences and memory leaks
    0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - imsm: Remove possibility for get_imsm_dev to return
    0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - Revert "mdadm: fix coredump of mdadm --monitor -r"
    0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - util: replace ioctl use with function
    0020-util-replace-ioctl-use-with-function.patch
  - mdadm/super1: restore commit 45a87c2f31335 to fix
    0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - imsm: introduce get_disk_slot_in_dev()
    0022-imsm-introduce-get_disk_slot_in_dev.patch
  - imsm: use same slot across container
    0023-imsm-use-same-slot-across-container.patch
  - imsm: block changing slots during creation
    0024-imsm-block-changing-slots-during-creation.patch
  - mdadm: block update=ppl for non raid456 levels
    0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - mdadm: Fix array size mismatch after grow
    0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - mdadm: Remove dead code in imsm_fix_size_mismatch
    0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - Monitor: use devname as char array instead of pointer
    0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - Monitor: use snprintf to fill device name
    0029-Monitor-use-snprintf-to-fill-device-name.patch
  - Makefile: Don't build static build with everything and
    0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - DDF: Cleanup validate_geometry_ddf_container()
    0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - DDF: Fix NULL pointer dereference in
    0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - mdadm/Grow: Fix use after close bug by closing after
    0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - monitor: Avoid segfault when calling NULL
    0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - mdadm: Fix mdadm -r remove option regression
    0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - mdadm: Fix optional --write-behind parameter
    0036-mdadm-Fix-optional-write-behind-parameter.patch
  - mdadm: Replace obsolete usleep with nanosleep
    0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - mdadm: remove symlink option
    0038-mdadm-remove-symlink-option.patch
  - mdadm: move data_offset to struct shape
    0039-mdadm-move-data_offset-to-struct-shape.patch
  - mdadm: Don't open md device for CREATE and ASSEMBLE
    0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - Grow: Split Grow_reshape into helper function
    0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - Assemble: check if device is container before
    0042-Assemble-check-if-device-is-container-before-schedul.patch
  - super1: report truncated device
    0043-super1-report-truncated-device.patch
  - mdadm: Correct typos, punctuation and grammar in man
    0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - Manage: Block unsafe member failing
    0045-Manage-Block-unsafe-member-failing.patch
  - Monitor: Fix statelist memory leaks
    0046-Monitor-Fix-statelist-memory-leaks.patch
  - mdadm: added support for Intel Alderlake RST on VMD
    0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - mdadm: Add Documentation entries to systemd services
    0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - ReadMe: fix command-line help
    0049-ReadMe-fix-command-line-help.patch
  - mdadm: replace container level checking with inline
    0050-mdadm-replace-container-level-checking-with-inline.patch
  - Mdmonitor: Omit non-md devices
    0051-Mdmonitor-Omit-non-md-devices.patch
- Remove the following in house patch
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  because upstream merged version added in as
  0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
- Rename 0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
  to 1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.
- Update mdadm package to mdadm-4.2 (jsc#PED-1009, jsc#PED-947)
  All important modifications since previous update to mdadm-4.2
  are listed here.
  * The patches about Intel Matrix Storage Manager (including
    VROC support),
  - super-intel.c: Handle errors from calls to get_dev_sector_size()
  - imsm: change wrong size verification
  - imsm: add generic method to resolve "device" links
  - imsm: add devpath_to_char method
  - imsm: Limit support to the lowest namespace
  - imsm: correct offset for 4k disks in --examine output
  - imsm: Fix possible memory leaks and refactor freeing struct dl
  - imsm: fix num_data_stripes after raid0 takeover
  - imsm: introduce helpers to manage file descriptors
  - imsm: free allocated memory in imsm_fix_size_mismatch
  - imsm: assert if there is migration but prev_map doesn't exist
  * The patches to fix program issues,
  - mdadm/super1: It needs to specify int32 for bitmap_offset
  - Fix memory leak after "mdadm --detail"
  - Utils: Change sprintf to snprintf
  - mdadm: fix coredump of mdadm --monitor -r
  - Fix error message when creating raid 4, 5 and 10
  - Fix buffer size warning for strcp
  - Fix potential overlap dest buffer
  - Correct checking if file descriptors are valid
  - Monitor: print message before quit for no array to monitor
  * Improvement or bug fixes for mdadm itself,
  - Assemble: skip devices that don't match uuid instead of aborting the
    assembly.
  - Assemble: apply sysfs rules
  - Assemble: start dirty and degraded array.
  - Incremental: Close unclosed mdfd in IncrementalScan()
  - Monitor: make libudev dependency optional
  - Manage: Call validate_geometry when adding drive to external
    container
  - Remove Spare drives line from details for external metadata
  - Don't associate spares with other arrays during RAID Examine
  - Add error handling for chunk size in RAID1
  - Add monitor delay parameter to mdadm.conf
  - disallow create or grow clustered bitmap with writemostly set
  - mdadm/Detail: Can't show container name correctly when unpluging disks
  - mdadm: block creation with long names
  - mdadm: fix growing containers
- Remove the following patches because they are all included
  in mdadm-4.2,
  - 0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
  - 0002-Document-PART-POLICY-lines.patch
  - 0003-policy-support-devices-with-multiple-paths.patch
  - 0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
  - 0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
  - 0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
  - 0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
  - 0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
  - 0009-Grow-report-correct-new-chunk-size.patch
  - 0010-policy.c-prevent-NULL-pointer-referencing.patch
  - 0012-policy.c-Fix-for-compiler-error.patch
  - 0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
  - 0014-imsm-fix-reshape-for-2TB-drives.patch
  - 0015-Fix-spelling-typos.patch
  - 0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
  - 0018-Fix-reshape-for-decreasing-data-offset.patch
  - 0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
  - 0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
  - 0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
  - 0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
  - 0023-add-missing-units-to-examine.patch
  - 0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
  - 0025-Create-Block-rounding-size-to-max.patch
  - 0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
  - 0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
  - 0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
  - 0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
  - 0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
  - 0031-super-intel-Use-put_unaligned-in-split_ull.patch
  - 0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
  - 0033-mdadm.h-include-sysmacros.h-unconditionally.patch
  - 0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  - 0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  - 0036-imsm-close-removed-drive-fd.patch
  - 0037-mdadm-check-value-returned-by-snprintf-against-error.patch
  - 0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
  - 0039-mdadm-force-a-uuid-swap-on-big-endian.patch
  - 0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
  - 0041-Init-devlist-as-an-array.patch
  - 0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
  - 0043-udev-allow-for-udev-attribute-reading-bug.patch
  - 0044-imsm-save-current_vol-number.patch
  - 0045-imsm-allow-to-specify-second-volume-size.patch
  - 0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  - 0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
  - 0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  - 0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
  - 0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
  - 0054-Remove-last-traces-of-HOT_ADD_DISK.patch
  - 0055-Fix-up-a-few-formatting-issues.patch
  - 0056-Remove-unused-code.patch
  - 0057-imsm-return-correct-uuid-for-volume-in-detail.patch
  - 0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
  - 0059-Create-add-support-for-RAID0-layouts.patch
  - 0060-Assemble-add-support-for-RAID0-layouts.patch
  - 0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
  - 0062-Change-warning-message.patch
  - 0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
  - 0064-imsm-Update-grow-manual.patch
  - 0065-Add-support-for-Tebibytes.patch
  - 0066-imsm-fill-working_disks-according-to-metadata.patch
  - 0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
  - 0068-Remove-the-legacy-whitespace.patch
  - 0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
  - 0070-imsm-Remove-dump-restore-implementation.patch
  - 0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch
  - 0072-Detail-adding-sync-status-for-cluster-device.patch
  - 0073-imsm-Correct-minimal-device-size.patch
  - 0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
  - 0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
  - 0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
  - 0077-udev-Ignore-change-event-for-imsm.patch
  - 0078-Manage-imsm-Write-metadata-before-add.patch
  - 0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
  - 0080-clean-up-meaning-of-small-typo.patch
  - 0081-Assemble.c-respect-force-flag.patch
  - 0082-mdcheck-Log-when-done.patch
  - 0083-Makefile-add-EXTRAVERSION-support.patch
  - 0084-uuid.c-split-uuid-stuffs-from-util.c.patch
  - 0085-Include-count-for-0-character-when-using-strncpy-to-.patch
  - 0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
  - 0087-Block-overwriting-existing-links-while-manual-assemb.patch
  - 0088-Detect-too-small-device-error-rather-than-underflow-.patch
  - 0089-Use-more-secure-HTTPS-URLs.patch
  - 0090-Update-link-to-Intel-page-for-IMSM.patch
  - 0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
  - 0092-Specify-nodes-number-when-updating-cluster-nodes.patch
  - 0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
  - 0094-manual-update-examine-badblocks.patch
  - 0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
  - 0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
  - 0097-Monitor-refresh-mdstat-fd-after-select.patch
  - 0098-Monitor-stop-notifing-about-containers.patch
  - 0099-mdmonitor-set-small-delay-once.patch
  - 0100-Check-if-other-Monitor-instance-running-before-fork.patch
  - 0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
  - 0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
  - 0103-Create.c-close-mdfd-and-generate-uevent.patch
  - 0104-imsm-update-num_data_stripes-according-to-dev_size.patch
  - 0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
  - 0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
  - 0107-imsm-limit-support-to-first-NVMe-namespace.patch
  - 0108-mdadm-Unify-forks-behaviour.patch
  - 0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
  - 0110-Make-target-to-install-binaries-only.patch
  - 0111-udev-start-grow-service-automatically.patch
  - 0112-Incremental-Remove-redundant-spare-movement-logic.patch
  - 0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch
  - 0114-super1-fix-Floating-point-exception.patch
  - 0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch
  - 0116-imsm-nvme-multipath-support.patch
  - 0117-Grow-be-careful-of-corrupt-dev_roles-list.patch
  - 0118-Remove-Spare-drives-line-from-details-for-external-m.patch
  - 0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch
  - 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch
  - 0121-imsm-support-for-third-Sata-controller.patch
- The patch from SLE15-SP4 is removed because it is in mdadm-4.2
  upstream already,
  - Monitor: print message before quit for no array to monitor
    (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="colyli@suse.com" date="1669291200">- mdadm.spec: remove "PreReq: %{_sbindir}/mkinitrd" as it is
  unnecessary now. (bsc#1202352)</changelog>
  <changelog author="colyli@suse.com" date="1669291201">- Call mdadm_env.sh from /usr/libexec/mdadm (bsc#1111960, bsc#1202090)
  1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The patch (bsc#1111960) which fixed rpm check failure is replaced
  by the above patch,
  1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.</changelog>
  <changelog author="colyli@suse.com" date="1670414400">- Drop the patch which is reported as regression by upstream developer
  (bsc#1206139)
  0045-Manage-Block-unsafe-member-failing.patch
- Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they
  are both the requirement to update mdadm to latest upstream state
  via different requestors.</changelog>
  <changelog author="colyli@suse.com" date="1672056000">- mdadm.spec: create the following symbolic link in /sbin for
  compatibility,
  /sbin/mdadm -&gt; /usr/sbin/mdadm
  /sbin/mdmon -&gt; /usr/sbin/mdmon
  (jsc#PED-1009, jsc#PED-947)</changelog>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
</package>
<package pkgid="e0fc90fae4d0e91561bf5c29a698c292bf848be7380fc88174211db85367b902" name="mdadm" arch="src">
  <version epoch="0" ver="4.2" rel="150500.6.3.1"/>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1615982400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1633521600">- Install mdadm in _sbindir rather than /sbin.  This is more
  appropriate now that we have a merged-/usr.
  (bsc#1191076)</changelog>
  <changelog author="sweiberg@suse.com" date="1637668800">- Use %{_sbindir} for prerequisite of mkinitrd to work with
  usrmerge of dracut-mkinitrd-deprecated</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0121-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1667476800">- Update mdadm package to latest mdadm since mdadm-4.2
  (jsc#PED-1009, jsc#PED-947)
  * Only patches directly change runtime programs included,
  - Unify error message.
    0001-Unify-error-message.patch
  - mdadm: Fix double free
    0002-mdadm-Fix-double-free.patch
  - Grow_reshape: Add r0 grow size error message and update
    0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - udev: adapt rules to systemd v247
    0004-udev-adapt-rules-to-systemd-v247.patch
  - Replace error prone signal() with sigaction()
    0005-Replace-error-prone-signal-with-sigaction.patch
  - mdadm: Respect config file location in man
    0006-mdadm-Respect-config-file-location-in-man.patch
  - mdadm: Update ReadMe
    0007-mdadm-Update-ReadMe.patch
  - mdadm: Update config man regarding default files and
    0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - mdadm: Update config manual
    0009-mdadm-Update-config-manual.patch
  - Create, Build: use default_layout()
    0010-Create-Build-use-default_layout.patch
  - mdadm: add map_num_s()
    0011-mdadm-add-map_num_s.patch
  - mdmon: Stop parsing duplicate options
    0012-mdmon-Stop-parsing-duplicate-options.patch
  - Grow: block -n on external volumes.
    0013-Grow-block-n-on-external-volumes.patch
  - Incremental: Fix possible memory and resource leaks
    0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - Mdmonitor: Fix segfault
    0015-Mdmonitor-Fix-segfault.patch
  - Mdmonitor: Improve logging method
    0016-Mdmonitor-Improve-logging-method.patch
  - Fix possible NULL ptr dereferences and memory leaks
    0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - imsm: Remove possibility for get_imsm_dev to return
    0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - Revert "mdadm: fix coredump of mdadm --monitor -r"
    0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - util: replace ioctl use with function
    0020-util-replace-ioctl-use-with-function.patch
  - mdadm/super1: restore commit 45a87c2f31335 to fix
    0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - imsm: introduce get_disk_slot_in_dev()
    0022-imsm-introduce-get_disk_slot_in_dev.patch
  - imsm: use same slot across container
    0023-imsm-use-same-slot-across-container.patch
  - imsm: block changing slots during creation
    0024-imsm-block-changing-slots-during-creation.patch
  - mdadm: block update=ppl for non raid456 levels
    0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - mdadm: Fix array size mismatch after grow
    0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - mdadm: Remove dead code in imsm_fix_size_mismatch
    0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - Monitor: use devname as char array instead of pointer
    0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - Monitor: use snprintf to fill device name
    0029-Monitor-use-snprintf-to-fill-device-name.patch
  - Makefile: Don't build static build with everything and
    0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - DDF: Cleanup validate_geometry_ddf_container()
    0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - DDF: Fix NULL pointer dereference in
    0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - mdadm/Grow: Fix use after close bug by closing after
    0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - monitor: Avoid segfault when calling NULL
    0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - mdadm: Fix mdadm -r remove option regression
    0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - mdadm: Fix optional --write-behind parameter
    0036-mdadm-Fix-optional-write-behind-parameter.patch
  - mdadm: Replace obsolete usleep with nanosleep
    0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - mdadm: remove symlink option
    0038-mdadm-remove-symlink-option.patch
  - mdadm: move data_offset to struct shape
    0039-mdadm-move-data_offset-to-struct-shape.patch
  - mdadm: Don't open md device for CREATE and ASSEMBLE
    0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - Grow: Split Grow_reshape into helper function
    0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - Assemble: check if device is container before
    0042-Assemble-check-if-device-is-container-before-schedul.patch
  - super1: report truncated device
    0043-super1-report-truncated-device.patch
  - mdadm: Correct typos, punctuation and grammar in man
    0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - Manage: Block unsafe member failing
    0045-Manage-Block-unsafe-member-failing.patch
  - Monitor: Fix statelist memory leaks
    0046-Monitor-Fix-statelist-memory-leaks.patch
  - mdadm: added support for Intel Alderlake RST on VMD
    0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - mdadm: Add Documentation entries to systemd services
    0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - ReadMe: fix command-line help
    0049-ReadMe-fix-command-line-help.patch
  - mdadm: replace container level checking with inline
    0050-mdadm-replace-container-level-checking-with-inline.patch
  - Mdmonitor: Omit non-md devices
    0051-Mdmonitor-Omit-non-md-devices.patch
- Remove the following in house patch
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  because upstream merged version added in as
  0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
- Rename 0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
  to 1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.
- Update mdadm package to mdadm-4.2 (jsc#PED-1009, jsc#PED-947)
  All important modifications since previous update to mdadm-4.2
  are listed here.
  * The patches about Intel Matrix Storage Manager (including
    VROC support),
  - super-intel.c: Handle errors from calls to get_dev_sector_size()
  - imsm: change wrong size verification
  - imsm: add generic method to resolve "device" links
  - imsm: add devpath_to_char method
  - imsm: Limit support to the lowest namespace
  - imsm: correct offset for 4k disks in --examine output
  - imsm: Fix possible memory leaks and refactor freeing struct dl
  - imsm: fix num_data_stripes after raid0 takeover
  - imsm: introduce helpers to manage file descriptors
  - imsm: free allocated memory in imsm_fix_size_mismatch
  - imsm: assert if there is migration but prev_map doesn't exist
  * The patches to fix program issues,
  - mdadm/super1: It needs to specify int32 for bitmap_offset
  - Fix memory leak after "mdadm --detail"
  - Utils: Change sprintf to snprintf
  - mdadm: fix coredump of mdadm --monitor -r
  - Fix error message when creating raid 4, 5 and 10
  - Fix buffer size warning for strcp
  - Fix potential overlap dest buffer
  - Correct checking if file descriptors are valid
  - Monitor: print message before quit for no array to monitor
  * Improvement or bug fixes for mdadm itself,
  - Assemble: skip devices that don't match uuid instead of aborting the
    assembly.
  - Assemble: apply sysfs rules
  - Assemble: start dirty and degraded array.
  - Incremental: Close unclosed mdfd in IncrementalScan()
  - Monitor: make libudev dependency optional
  - Manage: Call validate_geometry when adding drive to external
    container
  - Remove Spare drives line from details for external metadata
  - Don't associate spares with other arrays during RAID Examine
  - Add error handling for chunk size in RAID1
  - Add monitor delay parameter to mdadm.conf
  - disallow create or grow clustered bitmap with writemostly set
  - mdadm/Detail: Can't show container name correctly when unpluging disks
  - mdadm: block creation with long names
  - mdadm: fix growing containers
- Remove the following patches because they are all included
  in mdadm-4.2,
  - 0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
  - 0002-Document-PART-POLICY-lines.patch
  - 0003-policy-support-devices-with-multiple-paths.patch
  - 0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
  - 0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
  - 0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
  - 0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
  - 0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
  - 0009-Grow-report-correct-new-chunk-size.patch
  - 0010-policy.c-prevent-NULL-pointer-referencing.patch
  - 0012-policy.c-Fix-for-compiler-error.patch
  - 0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
  - 0014-imsm-fix-reshape-for-2TB-drives.patch
  - 0015-Fix-spelling-typos.patch
  - 0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
  - 0018-Fix-reshape-for-decreasing-data-offset.patch
  - 0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
  - 0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
  - 0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
  - 0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
  - 0023-add-missing-units-to-examine.patch
  - 0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
  - 0025-Create-Block-rounding-size-to-max.patch
  - 0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
  - 0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
  - 0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
  - 0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
  - 0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
  - 0031-super-intel-Use-put_unaligned-in-split_ull.patch
  - 0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
  - 0033-mdadm.h-include-sysmacros.h-unconditionally.patch
  - 0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  - 0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  - 0036-imsm-close-removed-drive-fd.patch
  - 0037-mdadm-check-value-returned-by-snprintf-against-error.patch
  - 0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
  - 0039-mdadm-force-a-uuid-swap-on-big-endian.patch
  - 0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
  - 0041-Init-devlist-as-an-array.patch
  - 0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
  - 0043-udev-allow-for-udev-attribute-reading-bug.patch
  - 0044-imsm-save-current_vol-number.patch
  - 0045-imsm-allow-to-specify-second-volume-size.patch
  - 0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  - 0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
  - 0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  - 0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
  - 0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
  - 0054-Remove-last-traces-of-HOT_ADD_DISK.patch
  - 0055-Fix-up-a-few-formatting-issues.patch
  - 0056-Remove-unused-code.patch
  - 0057-imsm-return-correct-uuid-for-volume-in-detail.patch
  - 0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
  - 0059-Create-add-support-for-RAID0-layouts.patch
  - 0060-Assemble-add-support-for-RAID0-layouts.patch
  - 0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
  - 0062-Change-warning-message.patch
  - 0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
  - 0064-imsm-Update-grow-manual.patch
  - 0065-Add-support-for-Tebibytes.patch
  - 0066-imsm-fill-working_disks-according-to-metadata.patch
  - 0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
  - 0068-Remove-the-legacy-whitespace.patch
  - 0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
  - 0070-imsm-Remove-dump-restore-implementation.patch
  - 0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch
  - 0072-Detail-adding-sync-status-for-cluster-device.patch
  - 0073-imsm-Correct-minimal-device-size.patch
  - 0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
  - 0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
  - 0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
  - 0077-udev-Ignore-change-event-for-imsm.patch
  - 0078-Manage-imsm-Write-metadata-before-add.patch
  - 0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
  - 0080-clean-up-meaning-of-small-typo.patch
  - 0081-Assemble.c-respect-force-flag.patch
  - 0082-mdcheck-Log-when-done.patch
  - 0083-Makefile-add-EXTRAVERSION-support.patch
  - 0084-uuid.c-split-uuid-stuffs-from-util.c.patch
  - 0085-Include-count-for-0-character-when-using-strncpy-to-.patch
  - 0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
  - 0087-Block-overwriting-existing-links-while-manual-assemb.patch
  - 0088-Detect-too-small-device-error-rather-than-underflow-.patch
  - 0089-Use-more-secure-HTTPS-URLs.patch
  - 0090-Update-link-to-Intel-page-for-IMSM.patch
  - 0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
  - 0092-Specify-nodes-number-when-updating-cluster-nodes.patch
  - 0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
  - 0094-manual-update-examine-badblocks.patch
  - 0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
  - 0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
  - 0097-Monitor-refresh-mdstat-fd-after-select.patch
  - 0098-Monitor-stop-notifing-about-containers.patch
  - 0099-mdmonitor-set-small-delay-once.patch
  - 0100-Check-if-other-Monitor-instance-running-before-fork.patch
  - 0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
  - 0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
  - 0103-Create.c-close-mdfd-and-generate-uevent.patch
  - 0104-imsm-update-num_data_stripes-according-to-dev_size.patch
  - 0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
  - 0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
  - 0107-imsm-limit-support-to-first-NVMe-namespace.patch
  - 0108-mdadm-Unify-forks-behaviour.patch
  - 0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
  - 0110-Make-target-to-install-binaries-only.patch
  - 0111-udev-start-grow-service-automatically.patch
  - 0112-Incremental-Remove-redundant-spare-movement-logic.patch
  - 0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch
  - 0114-super1-fix-Floating-point-exception.patch
  - 0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch
  - 0116-imsm-nvme-multipath-support.patch
  - 0117-Grow-be-careful-of-corrupt-dev_roles-list.patch
  - 0118-Remove-Spare-drives-line-from-details-for-external-m.patch
  - 0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch
  - 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch
  - 0121-imsm-support-for-third-Sata-controller.patch
- The patch from SLE15-SP4 is removed because it is in mdadm-4.2
  upstream already,
  - Monitor: print message before quit for no array to monitor
    (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="colyli@suse.com" date="1669291200">- mdadm.spec: remove "PreReq: %{_sbindir}/mkinitrd" as it is
  unnecessary now. (bsc#1202352)</changelog>
  <changelog author="colyli@suse.com" date="1669291201">- Call mdadm_env.sh from /usr/libexec/mdadm (bsc#1111960, bsc#1202090)
  1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The patch (bsc#1111960) which fixed rpm check failure is replaced
  by the above patch,
  1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.</changelog>
  <changelog author="colyli@suse.com" date="1670414400">- Drop the patch which is reported as regression by upstream developer
  (bsc#1206139)
  0045-Manage-Block-unsafe-member-failing.patch
- Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they
  are both the requirement to update mdadm to latest upstream state
  via different requestors.</changelog>
  <changelog author="colyli@suse.com" date="1672056000">- mdadm.spec: create the following symbolic link in /sbin for
  compatibility,
  /sbin/mdadm -&gt; /usr/sbin/mdadm
  /sbin/mdmon -&gt; /usr/sbin/mdmon
  (jsc#PED-1009, jsc#PED-947)</changelog>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
</package>
<package pkgid="86fe7009eff4ff264005e1a16ca2a7a01a922a8b4cb5ad5a7eee2cf6d394631e" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.2" rel="150500.6.3.1"/>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1615982400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1633521600">- Install mdadm in _sbindir rather than /sbin.  This is more
  appropriate now that we have a merged-/usr.
  (bsc#1191076)</changelog>
  <changelog author="sweiberg@suse.com" date="1637668800">- Use %{_sbindir} for prerequisite of mkinitrd to work with
  usrmerge of dracut-mkinitrd-deprecated</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0121-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1667476800">- Update mdadm package to latest mdadm since mdadm-4.2
  (jsc#PED-1009, jsc#PED-947)
  * Only patches directly change runtime programs included,
  - Unify error message.
    0001-Unify-error-message.patch
  - mdadm: Fix double free
    0002-mdadm-Fix-double-free.patch
  - Grow_reshape: Add r0 grow size error message and update
    0003-Grow_reshape-Add-r0-grow-size-error-message-and-upda.patch
  - udev: adapt rules to systemd v247
    0004-udev-adapt-rules-to-systemd-v247.patch
  - Replace error prone signal() with sigaction()
    0005-Replace-error-prone-signal-with-sigaction.patch
  - mdadm: Respect config file location in man
    0006-mdadm-Respect-config-file-location-in-man.patch
  - mdadm: Update ReadMe
    0007-mdadm-Update-ReadMe.patch
  - mdadm: Update config man regarding default files and
    0008-mdadm-Update-config-man-regarding-default-files-and-.patch
  - mdadm: Update config manual
    0009-mdadm-Update-config-manual.patch
  - Create, Build: use default_layout()
    0010-Create-Build-use-default_layout.patch
  - mdadm: add map_num_s()
    0011-mdadm-add-map_num_s.patch
  - mdmon: Stop parsing duplicate options
    0012-mdmon-Stop-parsing-duplicate-options.patch
  - Grow: block -n on external volumes.
    0013-Grow-block-n-on-external-volumes.patch
  - Incremental: Fix possible memory and resource leaks
    0014-Incremental-Fix-possible-memory-and-resource-leaks.patch
  - Mdmonitor: Fix segfault
    0015-Mdmonitor-Fix-segfault.patch
  - Mdmonitor: Improve logging method
    0016-Mdmonitor-Improve-logging-method.patch
  - Fix possible NULL ptr dereferences and memory leaks
    0017-Fix-possible-NULL-ptr-dereferences-and-memory-leaks.patch
  - imsm: Remove possibility for get_imsm_dev to return
    0018-imsm-Remove-possibility-for-get_imsm_dev-to-return-N.patch
  - Revert "mdadm: fix coredump of mdadm --monitor -r"
    0019-Revert-mdadm-fix-coredump-of-mdadm-monitor-r.patch
  - util: replace ioctl use with function
    0020-util-replace-ioctl-use-with-function.patch
  - mdadm/super1: restore commit 45a87c2f31335 to fix
    0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  - imsm: introduce get_disk_slot_in_dev()
    0022-imsm-introduce-get_disk_slot_in_dev.patch
  - imsm: use same slot across container
    0023-imsm-use-same-slot-across-container.patch
  - imsm: block changing slots during creation
    0024-imsm-block-changing-slots-during-creation.patch
  - mdadm: block update=ppl for non raid456 levels
    0025-mdadm-block-update-ppl-for-non-raid456-levels.patch
  - mdadm: Fix array size mismatch after grow
    0026-mdadm-Fix-array-size-mismatch-after-grow.patch
  - mdadm: Remove dead code in imsm_fix_size_mismatch
    0027-mdadm-Remove-dead-code-in-imsm_fix_size_mismatch.patch
  - Monitor: use devname as char array instead of pointer
    0028-Monitor-use-devname-as-char-array-instead-of-pointer.patch
  - Monitor: use snprintf to fill device name
    0029-Monitor-use-snprintf-to-fill-device-name.patch
  - Makefile: Don't build static build with everything and
    0030-Makefile-Don-t-build-static-build-with-everything-an.patch
  - DDF: Cleanup validate_geometry_ddf_container()
    0031-DDF-Cleanup-validate_geometry_ddf_container.patch
  - DDF: Fix NULL pointer dereference in
    0032-DDF-Fix-NULL-pointer-dereference-in-validate_geometr.patch
  - mdadm/Grow: Fix use after close bug by closing after
    0033-mdadm-Grow-Fix-use-after-close-bug-by-closing-after-.patch
  - monitor: Avoid segfault when calling NULL
    0034-monitor-Avoid-segfault-when-calling-NULL-get_bad_blo.patch
  - mdadm: Fix mdadm -r remove option regression
    0035-mdadm-Fix-mdadm-r-remove-option-regression.patch
  - mdadm: Fix optional --write-behind parameter
    0036-mdadm-Fix-optional-write-behind-parameter.patch
  - mdadm: Replace obsolete usleep with nanosleep
    0037-mdadm-Replace-obsolete-usleep-with-nanosleep.patch
  - mdadm: remove symlink option
    0038-mdadm-remove-symlink-option.patch
  - mdadm: move data_offset to struct shape
    0039-mdadm-move-data_offset-to-struct-shape.patch
  - mdadm: Don't open md device for CREATE and ASSEMBLE
    0040-mdadm-Don-t-open-md-device-for-CREATE-and-ASSEMBLE.patch
  - Grow: Split Grow_reshape into helper function
    0041-Grow-Split-Grow_reshape-into-helper-function.patch
  - Assemble: check if device is container before
    0042-Assemble-check-if-device-is-container-before-schedul.patch
  - super1: report truncated device
    0043-super1-report-truncated-device.patch
  - mdadm: Correct typos, punctuation and grammar in man
    0044-mdadm-Correct-typos-punctuation-and-grammar-in-man.patch
  - Manage: Block unsafe member failing
    0045-Manage-Block-unsafe-member-failing.patch
  - Monitor: Fix statelist memory leaks
    0046-Monitor-Fix-statelist-memory-leaks.patch
  - mdadm: added support for Intel Alderlake RST on VMD
    0047-mdadm-added-support-for-Intel-Alderlake-RST-on-VMD-p.patch
  - mdadm: Add Documentation entries to systemd services
    0048-mdadm-Add-Documentation-entries-to-systemd-services.patch
  - ReadMe: fix command-line help
    0049-ReadMe-fix-command-line-help.patch
  - mdadm: replace container level checking with inline
    0050-mdadm-replace-container-level-checking-with-inline.patch
  - Mdmonitor: Omit non-md devices
    0051-Mdmonitor-Omit-non-md-devices.patch
- Remove the following in house patch
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
  because upstream merged version added in as
  0021-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch
- Rename 0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
  to 1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.
- Update mdadm package to mdadm-4.2 (jsc#PED-1009, jsc#PED-947)
  All important modifications since previous update to mdadm-4.2
  are listed here.
  * The patches about Intel Matrix Storage Manager (including
    VROC support),
  - super-intel.c: Handle errors from calls to get_dev_sector_size()
  - imsm: change wrong size verification
  - imsm: add generic method to resolve "device" links
  - imsm: add devpath_to_char method
  - imsm: Limit support to the lowest namespace
  - imsm: correct offset for 4k disks in --examine output
  - imsm: Fix possible memory leaks and refactor freeing struct dl
  - imsm: fix num_data_stripes after raid0 takeover
  - imsm: introduce helpers to manage file descriptors
  - imsm: free allocated memory in imsm_fix_size_mismatch
  - imsm: assert if there is migration but prev_map doesn't exist
  * The patches to fix program issues,
  - mdadm/super1: It needs to specify int32 for bitmap_offset
  - Fix memory leak after "mdadm --detail"
  - Utils: Change sprintf to snprintf
  - mdadm: fix coredump of mdadm --monitor -r
  - Fix error message when creating raid 4, 5 and 10
  - Fix buffer size warning for strcp
  - Fix potential overlap dest buffer
  - Correct checking if file descriptors are valid
  - Monitor: print message before quit for no array to monitor
  * Improvement or bug fixes for mdadm itself,
  - Assemble: skip devices that don't match uuid instead of aborting the
    assembly.
  - Assemble: apply sysfs rules
  - Assemble: start dirty and degraded array.
  - Incremental: Close unclosed mdfd in IncrementalScan()
  - Monitor: make libudev dependency optional
  - Manage: Call validate_geometry when adding drive to external
    container
  - Remove Spare drives line from details for external metadata
  - Don't associate spares with other arrays during RAID Examine
  - Add error handling for chunk size in RAID1
  - Add monitor delay parameter to mdadm.conf
  - disallow create or grow clustered bitmap with writemostly set
  - mdadm/Detail: Can't show container name correctly when unpluging disks
  - mdadm: block creation with long names
  - mdadm: fix growing containers
- Remove the following patches because they are all included
  in mdadm-4.2,
  - 0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
  - 0002-Document-PART-POLICY-lines.patch
  - 0003-policy-support-devices-with-multiple-paths.patch
  - 0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
  - 0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
  - 0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
  - 0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
  - 0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
  - 0009-Grow-report-correct-new-chunk-size.patch
  - 0010-policy.c-prevent-NULL-pointer-referencing.patch
  - 0012-policy.c-Fix-for-compiler-error.patch
  - 0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
  - 0014-imsm-fix-reshape-for-2TB-drives.patch
  - 0015-Fix-spelling-typos.patch
  - 0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
  - 0018-Fix-reshape-for-decreasing-data-offset.patch
  - 0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
  - 0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
  - 0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
  - 0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
  - 0023-add-missing-units-to-examine.patch
  - 0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
  - 0025-Create-Block-rounding-size-to-max.patch
  - 0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
  - 0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
  - 0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
  - 0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
  - 0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
  - 0031-super-intel-Use-put_unaligned-in-split_ull.patch
  - 0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
  - 0033-mdadm.h-include-sysmacros.h-unconditionally.patch
  - 0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
  - 0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
  - 0036-imsm-close-removed-drive-fd.patch
  - 0037-mdadm-check-value-returned-by-snprintf-against-error.patch
  - 0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
  - 0039-mdadm-force-a-uuid-swap-on-big-endian.patch
  - 0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
  - 0041-Init-devlist-as-an-array.patch
  - 0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
  - 0043-udev-allow-for-udev-attribute-reading-bug.patch
  - 0044-imsm-save-current_vol-number.patch
  - 0045-imsm-allow-to-specify-second-volume-size.patch
  - 0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
  - 0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
  - 0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
  - 0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
  - 0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
  - 0054-Remove-last-traces-of-HOT_ADD_DISK.patch
  - 0055-Fix-up-a-few-formatting-issues.patch
  - 0056-Remove-unused-code.patch
  - 0057-imsm-return-correct-uuid-for-volume-in-detail.patch
  - 0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
  - 0059-Create-add-support-for-RAID0-layouts.patch
  - 0060-Assemble-add-support-for-RAID0-layouts.patch
  - 0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
  - 0062-Change-warning-message.patch
  - 0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
  - 0064-imsm-Update-grow-manual.patch
  - 0065-Add-support-for-Tebibytes.patch
  - 0066-imsm-fill-working_disks-according-to-metadata.patch
  - 0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
  - 0068-Remove-the-legacy-whitespace.patch
  - 0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
  - 0070-imsm-Remove-dump-restore-implementation.patch
  - 0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch
  - 0072-Detail-adding-sync-status-for-cluster-device.patch
  - 0073-imsm-Correct-minimal-device-size.patch
  - 0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
  - 0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
  - 0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
  - 0077-udev-Ignore-change-event-for-imsm.patch
  - 0078-Manage-imsm-Write-metadata-before-add.patch
  - 0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
  - 0080-clean-up-meaning-of-small-typo.patch
  - 0081-Assemble.c-respect-force-flag.patch
  - 0082-mdcheck-Log-when-done.patch
  - 0083-Makefile-add-EXTRAVERSION-support.patch
  - 0084-uuid.c-split-uuid-stuffs-from-util.c.patch
  - 0085-Include-count-for-0-character-when-using-strncpy-to-.patch
  - 0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
  - 0087-Block-overwriting-existing-links-while-manual-assemb.patch
  - 0088-Detect-too-small-device-error-rather-than-underflow-.patch
  - 0089-Use-more-secure-HTTPS-URLs.patch
  - 0090-Update-link-to-Intel-page-for-IMSM.patch
  - 0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
  - 0092-Specify-nodes-number-when-updating-cluster-nodes.patch
  - 0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
  - 0094-manual-update-examine-badblocks.patch
  - 0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
  - 0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
  - 0097-Monitor-refresh-mdstat-fd-after-select.patch
  - 0098-Monitor-stop-notifing-about-containers.patch
  - 0099-mdmonitor-set-small-delay-once.patch
  - 0100-Check-if-other-Monitor-instance-running-before-fork.patch
  - 0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
  - 0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
  - 0103-Create.c-close-mdfd-and-generate-uevent.patch
  - 0104-imsm-update-num_data_stripes-according-to-dev_size.patch
  - 0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
  - 0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
  - 0107-imsm-limit-support-to-first-NVMe-namespace.patch
  - 0108-mdadm-Unify-forks-behaviour.patch
  - 0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
  - 0110-Make-target-to-install-binaries-only.patch
  - 0111-udev-start-grow-service-automatically.patch
  - 0112-Incremental-Remove-redundant-spare-movement-logic.patch
  - 0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch
  - 0114-super1-fix-Floating-point-exception.patch
  - 0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch
  - 0116-imsm-nvme-multipath-support.patch
  - 0117-Grow-be-careful-of-corrupt-dev_roles-list.patch
  - 0118-Remove-Spare-drives-line-from-details-for-external-m.patch
  - 0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch
  - 0120-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch
  - 0121-imsm-support-for-third-Sata-controller.patch
- The patch from SLE15-SP4 is removed because it is in mdadm-4.2
  upstream already,
  - Monitor: print message before quit for no array to monitor
    (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="colyli@suse.com" date="1669291200">- mdadm.spec: remove "PreReq: %{_sbindir}/mkinitrd" as it is
  unnecessary now. (bsc#1202352)</changelog>
  <changelog author="colyli@suse.com" date="1669291201">- Call mdadm_env.sh from /usr/libexec/mdadm (bsc#1111960, bsc#1202090)
  1004-call-mdadm_env.sh-from-usr-libexec-mdadm.patch
- The patch (bsc#1111960) which fixed rpm check failure is replaced
  by the above patch,
  1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch.</changelog>
  <changelog author="colyli@suse.com" date="1670414400">- Drop the patch which is reported as regression by upstream developer
  (bsc#1206139)
  0045-Manage-Block-unsafe-member-failing.patch
- Add jsc#PED-947 together with jsc#PED-1009 in mdadm.changes, they
  are both the requirement to update mdadm to latest upstream state
  via different requestors.</changelog>
  <changelog author="colyli@suse.com" date="1672056000">- mdadm.spec: create the following symbolic link in /sbin for
  compatibility,
  /sbin/mdadm -&gt; /usr/sbin/mdadm
  /sbin/mdmon -&gt; /usr/sbin/mdmon
  (jsc#PED-1009, jsc#PED-947)</changelog>
  <changelog author="colyli@suse.de" date="1680350400">- sysconfig.mdadm: Remove ServiceRestart line to mdadm since there
  is not such systemd service. (bsc#1203491)</changelog>
  <changelog author="colyli@suse.de" date="1682337600">- Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4 (bsc#1205493, bsc#1205830)
  - mdmon: fix segfault
    0052-mdmon-fix-segfault.patch
  - util: remove obsolete code from get_md_name
    0053-util-remove-obsolete-code-from-get_md_name.patch
  - mdmon: don't test both 'all' and 'container_name'.
    0054-mdmon-don-t-test-both-all-and-container_name.patch
  - mdmon: change systemd unit file to use --foreground
    0055-mdmon-change-systemd-unit-file-to-use-foreground.patch
  - mdmon: Remove need for KillMode=none
    0056-mdmon-Remove-need-for-KillMode-none.patch
  - mdmon: Improve switchroot interactions.
    0057-mdmon-Improve-switchroot-interactions.patch
  - mdopen: always try create_named_array()
    0058-mdopen-always-try-create_named_array.patch
  - Improvements for IMSM_NO_PLATFORM testing
    0059-Improvements-for-IMSM_NO_PLATFORM-testing.patch</changelog>
  <changelog author="colyli@suse.de" date="1685102400">- Grow: fix possible memory leak (bsc#1208618)
  0060-Grow-fix-possible-memory-leak.patch
- Grow: fix can't change bitmap type from none to clustered
  (bsc#1208618)
  0061-Grow-fix-can-t-change-bitmap-type-from-none-to-clustered.patch
- Use source code mdadm-4.2.tar.xz from kernel.org version for
  checksum
  - mdadm-4.2.tar.xz</changelog>
</package>
<package pkgid="62061ab7e2ed4289907db3a9ffeefe7da8c2f25fa8bbcb67da20c0b2d108c84f" name="mockito" arch="noarch">
  <version epoch="0" ver="1.10.19" rel="150200.3.4.1"/>
  <changelog author="fstrba@suse.com" date="1549972800">- Initial packaging of mockito 1.10.19</changelog>
  <changelog author="jengelh@inai.de" date="1553342400">- Remove nonsense and bias from description.</changelog>
  <changelog author="fstrba@suse.com" date="1575028800">- Modified patch:
  * fix-bnd-config.patch
    + allow using objenesis 3.x too</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Fetch sources using source service instead of script</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Removed patch:
  * mockito-hamcrest.patch
    + Do not import org.hamcrest.core bundle that does not exist in
    hamcrest 2.x</changelog>
</package>
<package pkgid="4d0a480b8608ebdbfeee39cb3f7edbe67fde56278d9044b472a23596148ff5c6" name="mockito" arch="src">
  <version epoch="0" ver="1.10.19" rel="150200.3.4.1"/>
  <changelog author="fstrba@suse.com" date="1549972800">- Initial packaging of mockito 1.10.19</changelog>
  <changelog author="jengelh@inai.de" date="1553342400">- Remove nonsense and bias from description.</changelog>
  <changelog author="fstrba@suse.com" date="1575028800">- Modified patch:
  * fix-bnd-config.patch
    + allow using objenesis 3.x too</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Fetch sources using source service instead of script</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Removed patch:
  * mockito-hamcrest.patch
    + Do not import org.hamcrest.core bundle that does not exist in
    hamcrest 2.x</changelog>
</package>
<package pkgid="b11b4312ca54d3328cb15412d37cff88c36e05f3198fbf1a383caedf1fde2ba5" name="mockito-javadoc" arch="noarch">
  <version epoch="0" ver="1.10.19" rel="150200.3.4.1"/>
  <changelog author="fstrba@suse.com" date="1549972800">- Initial packaging of mockito 1.10.19</changelog>
  <changelog author="jengelh@inai.de" date="1553342400">- Remove nonsense and bias from description.</changelog>
  <changelog author="fstrba@suse.com" date="1575028800">- Modified patch:
  * fix-bnd-config.patch
    + allow using objenesis 3.x too</changelog>
  <changelog author="fstrba@suse.com" date="1585137600">- Fetch sources using source service instead of script</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 8</changelog>
  <changelog author="fstrba@suse.com" date="1654776000">- Removed patch:
  * mockito-hamcrest.patch
    + Do not import org.hamcrest.core bundle that does not exist in
    hamcrest 2.x</changelog>
</package>
<package pkgid="40c07493e7a987eb42b0b88220b7fb958562159d9d612b8c4ffe71938745d999" name="mojo-executor" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150200.3.3.12"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of mojo-executor 2.3.0</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Upgrade to version 2.3.1
- Added patch:
  * mojo-executor-dependency.patch
    + Collections.emptyList() has type of  java.lang.Object and
    cannot be cast to List&lt;Dependency&gt;.
- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.4.0:
  * Dependencies provided by Maven have been moved to the provided scope where
    possible
  * The plexus-utils dependency must remain in the compile scope due to
    MNG-6965. It has been updated to version 3.0.24 to avoid spurious security
    vulnerability notifications due to this dependency.</changelog>
</package>
<package pkgid="7c123218a3d7052ba293797be8955f4bd6ac1dcdc2ebf86e2a906a2495ab800d" name="mojo-executor" arch="src">
  <version epoch="0" ver="2.4.0" rel="150200.3.3.12"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of mojo-executor 2.3.0</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Upgrade to version 2.3.1
- Added patch:
  * mojo-executor-dependency.patch
    + Collections.emptyList() has type of  java.lang.Object and
    cannot be cast to List&lt;Dependency&gt;.
- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.4.0:
  * Dependencies provided by Maven have been moved to the provided scope where
    possible
  * The plexus-utils dependency must remain in the compile scope due to
    MNG-6965. It has been updated to version 3.0.24 to avoid spurious security
    vulnerability notifications due to this dependency.</changelog>
</package>
<package pkgid="4c5960874f2dcf448926b2aafc2e55c95d82c91c236a01465ca11260d865b36d" name="mojo-executor-javadoc" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150200.3.3.12"/>
  <changelog author="fstrba@suse.com" date="1572696000">- Initial packaging of mojo-executor 2.3.0</changelog>
  <changelog author="fstrba@suse.com" date="1574596800">- Upgrade to version 2.3.1
- Added patch:
  * mojo-executor-dependency.patch
    + Collections.emptyList() has type of  java.lang.Object and
    cannot be cast to List&lt;Dependency&gt;.
- Specify maven.compiler.release to fix build with jdk9+ and newer
  maven-javadoc-plugin</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 2.4.0:
  * Dependencies provided by Maven have been moved to the provided scope where
    possible
  * The plexus-utils dependency must remain in the compile scope due to
    MNG-6965. It has been updated to version 3.0.24 to avoid spurious security
    vulnerability notifications due to this dependency.</changelog>
</package>
<package pkgid="93fc77b308c5bbff2c5c135f3aa2d909c98e59b14e6c20c8cbe4309df8eb3fd6" name="mojo-parent" arch="noarch">
  <version epoch="0" ver="70" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1552824000">- Initial packaging of mojo-parent 40</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Upgrade to version 60
  * Compatible with newer plugins</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 70:
  * Improvement checkstyle configuration
  * Add modello-maven-plugin to pluginManagement
  * Remove Google search box due to privacy (#274) @slawekjaranowski
  * Put version for mrm-maven-plugin in property (#273) @slawekjaranowski
  * Add streamLogsOnFailures to m-invoker-p (#272) @slawekjaranowski
  * Add property for maven-fluido-skin version (#268) @slawekjaranowski
  * Setup Apache Matomo analytics (#259) @slawekjaranowski
  * Downgrade Checkstyle to 9.3. 10.x requires Java 11(ecfb1d1)
  * remove requirement to use ssh for github scm devCon
  * Require Maven 3.2.5 (#215) @slachiewicz
  * [#225] add SHA-512 hashes (#226) @bmarwell
  * Extract plugin version as variable so child pom can override if needed (#84) @nhojpatrick
  * remove issue-tracking as do not exists anymore (#148) @olamy
  * remove cim report as it do not exists anymore (#147) @olamy</changelog>
</package>
<package pkgid="095907ed63dcd9d802fc5d554218bb0d8deb5427cad4e89dc4e22e0caaeb2a6e" name="mojo-parent" arch="src">
  <version epoch="0" ver="70" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1552824000">- Initial packaging of mojo-parent 40</changelog>
  <changelog author="fstrba@suse.com" date="1648209600">- Upgrade to version 60
  * Compatible with newer plugins</changelog>
  <changelog author="dmueller@suse.com" date="1670155200">- update to 70:
  * Improvement checkstyle configuration
  * Add modello-maven-plugin to pluginManagement
  * Remove Google search box due to privacy (#274) @slawekjaranowski
  * Put version for mrm-maven-plugin in property (#273) @slawekjaranowski
  * Add streamLogsOnFailures to m-invoker-p (#272) @slawekjaranowski
  * Add property for maven-fluido-skin version (#268) @slawekjaranowski
  * Setup Apache Matomo analytics (#259) @slawekjaranowski
  * Downgrade Checkstyle to 9.3. 10.x requires Java 11(ecfb1d1)
  * remove requirement to use ssh for github scm devCon
  * Require Maven 3.2.5 (#215) @slachiewicz
  * [#225] add SHA-512 hashes (#226) @bmarwell
  * Extract plugin version as variable so child pom can override if needed (#84) @nhojpatrick
  * remove issue-tracking as do not exists anymore (#148) @olamy
  * remove cim report as it do not exists anymore (#147) @olamy</changelog>
</package>
<package pkgid="c2eb7c9cba724ff5056bc718157d72f76fea24279ad39d8a85675623af43565b" name="mozilla-nspr-32bit" arch="x86_64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="13542595f7922af404038d034ad8b7cde642567116d608264c804c0c46cd9286" name="mozilla-nspr" arch="aarch64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="7b8334d0926e6ab022dd12820cfdc2919991cc536306261f0c3e7ece22852f2a" name="mozilla-nspr" arch="ppc64le">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="ffde6e65d8feb789a1ad1de0153ed225c52e19b7e8ccef62d3ed6fdc17d46433" name="mozilla-nspr" arch="s390x">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="ebfe6d217845da5a0d7581e8cdf0d35d1cacbe9be5bf383a83d22daf1b55a145" name="mozilla-nspr" arch="src">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="58e440af88f3f4da36d0a33dd1dea7265987c39c3e58042c7a1f3c169dc8d0a2" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="80b3717a4a2576783d293ae6d70a97d1158e227aedf20eece68e0171287e7a03" name="mozilla-nspr-devel" arch="aarch64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="34df2cb0ba63ca70e6743bfdff02c961ba3da2cc37d206bcdae84cfa22346c40" name="mozilla-nspr-devel" arch="ppc64le">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="a6ac0ec0cd7e5c47d53da28aba833c1b1a45a64c873d5e999337b2f010b1f82f" name="mozilla-nspr-devel" arch="s390x">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="a47e50165733507b7f0c9861927348ca664ff680a03ddfc2707188e7c7141dda" name="mozilla-nspr-devel" arch="x86_64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="c7d0a1d40bcb1418538c519b6343f9d046526acbd82a78a4e3f4e09be4fd6041" name="net-snmp" arch="aarch64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="d3d9c48866c690213a3cef94dfc099df88fe1f28e712cd515bda31a45e507a35" name="net-snmp" arch="ppc64le">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="c4e1e2a35912033f83d8fcf30397e619c5896f239c3df3c28a23c1e76b936fe1" name="net-snmp" arch="s390x">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="49e53ddf566f5210fb46906117fad92db97b38423285dce6969d688470bbb6f5" name="net-snmp" arch="src">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="f16d42d8de81312eab97362e12b7e5ee611dd4417ae053273a4a84f880130f30" name="net-snmp" arch="x86_64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="55dda6b1aaca274058eced4e35e7dd4f7e5d05f376d8b7f0df36ab970f51297b" name="net-snmp-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="8be69f1ae8a2810be6d9e69f0b4482ca0866e9e7e55cf0fef0218999f2bb7566" name="net-snmp-devel" arch="aarch64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="79abb4e7e1823ed4ea86cf571862c50d905a8f8d027b489e980fdcde7a779c01" name="net-snmp-devel" arch="ppc64le">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="c2013a3bda62f0e296cccd5cb1781589cec7fd6e6d4a51f0b3eef512513670c5" name="net-snmp-devel" arch="s390x">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="c56caaf9bc673558bd78ab5c4c795951fa961fc10792e5e4d6181c89393fa785" name="net-snmp-devel" arch="x86_64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="6ee68feee187ada673e3bb899fd7b84848b751a640c6b424d7c599b38b42fcff" name="netty" arch="aarch64">
  <version epoch="0" ver="4.1.90" rel="150200.4.14.1"/>
  <changelog author="fstrba@suse.com" date="1573646400">- Initial packaging of netty 4.1.13</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Split pom-only artifacts into a subpackage netty-pom in order
  to generate their dependencies correctly</changelog>
  <changelog author="fstrba@suse.com" date="1586433600">- Added patch:
  * netty-CVE-2020-11612.patch
    + bsc#1168932, CVE-2020-11612
    + bsc#1169082, CVE-2020-10707</changelog>
  <changelog author="fstrba@suse.com" date="1613044800">- Added patch:
  * netty-CVE-2021-21290.patch
    + bsc#1182103, CVE-2021-21290</changelog>
  <changelog author="fstrba@suse.com" date="1613044801">- Upgrade to latest upstream version 4.1.59
- Removed patches:
  * netty-CVE-2020-11612.patch
  * netty-CVE-2021-21290.patch
    + fixes integrated in the upstream sources
  * 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
  * 0002-Remove-NPN.patch
  * 0003-Remove-conscrypt-ALPN.patch
  * 0004-Remove-jetty-ALPN.patch
    + replaced by new patches
- Added patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + remove various optional dependencies that we do not need
  * 0006-revert-Fix-native-image-build.patch
    + Revert changes that introduce a new dependency that we
    do not have
  * no-werror.patch
    + Do not treat warnings as errors
- Build -poms and -javadoc as noarch packages, since they do not
  install anything in arch-dependent directories</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to latest upstream version 4.1.60
  * fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request
    Content-Length header field is not validated by
    'Http2MultiplexHandler'
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
    + rediff to changed context
- Added patch:
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + revert optional disabled cache implementation that conflicts
    with our 0004-Remove-optional-dep-tcnative.patch</changelog>
  <changelog author="fstrba@suse.com" date="1639483200">- Upgrade to latest upstream version 4.1.72
  * fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn't allow
    setting size restrictions for decompressed data
  * fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn't
    restrict chunk length any may buffer skippable chunks in an
    unnecessary way
  * fixes: bsc#1193672, CVE-2021-43797: possible HTTP request
    smuggling due to insufficient validation against control
    characters
  * fixes: bsc#1184203, CVE-2021-21409: request smuggling via
    content-length header
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
  * no-werror.patch
    + rediff to changed context
- Added patch:
  * no-brotli-zstd.patch
    + disable Brotli and Zstd compression, since we lack
    the dependencies needed to build them</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Upgrade to latest upstream version 4.1.75
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to upstreeam version 4.1.90
  * Fixes of 4.1.90:
    + Adding header name of the header which failed validation
    + Fix HttpHeaders.names for non-String headers
    + Save expensive volatile operations in the common hot http
    decoder path
    + Avoid slow type checks against promises on outbound buffer's
    progress
    + Implement NonStickyEventExecutorGroup.inEventLoop
    + Native image: add support for unix domain sockets
    + Use MacOS SDK 10.9 to prevent apple notarization failures
    + Increase errno cache and guard against IOOBE
    + Don't reset BCSSLParameters when setting application protocols
    + WebSocketClientProtocolHandler: add option to disable UTF8
    validation
    + Chunked HTTP length decoding should account for
    whitespaces/ctrl chars
    + Handle NullPointerException thrown from
    NetworkInterface.getNetworkInterfaces()
  * Fixes of 4.1.89:
    + Don't fail on HttpObjectDecoder's maxHeaderSize greater then
    (Integer.MAX_VALUE - 2)
    + dyld: Symbol not found: _netty_jni_util_JNI_OnLoad when
    upgrading from 4.1.87.Final to 4.1.88.Final
  * Fixes of 4.1.88:
    + Speed-up HTTP 1.1 header and line parsing
    + Add StacklessSSLHandshakeException for ClosedChannelException
    + Modify changed CloseWebSocketFrame#statusCode() to change the
    fetch code to unsigned
    + Check if CommandLineTools are installed before trying to
    execute install_name_tool
    + Allow to adjust the GlobalEventExecutor quietPeriod via a
    system property
    + Add SslProvider.isOptionSupported(...)
    + Fix FlowControlHandler's behaviour to pass read events when
    auto-reading is turned off
    + Ensure Http2StreamFrameToHttpObjectCodec#decode doesn't add
    transfer-encoding for 204/304 response
    + Only do extra CNAME query if we couldnt follow the whole CNAME
    chain in the response
    + Include query id when a query failed
    + DnsResolveContext: include expected record types in exception
    message
    + Add necessary native-image configuration files for epoll
    + Create a deep-copy of the Throwable before returning it from
    the cache to prevent possible leaks
    + Always respect completeOncePreferredResolved in
    DnsNameResolver
    + fix brotli compression
    + Optionally depend on bctls-jdk15on
    + Make releasing objects back to Recycler faster
    + Correctly keep track of validExtensions per request / response
    + Add handling of inflight lookups to reduce real queries when
    lookup same hostname
    + DnsQueryContext: include query id and question info in
    exception message
    + AsciiStrings can be batch-encoded
  * Fixes of 4.1.87:
    + Upgrade to latest netty-tcnative release which doesnt link
    libcrypt
    + Add recvmmsg &amp; sendmmsg syscall number for loongarch64
    + Return correct value from SSLSession.getPacketSize() when
    using native SSL implementation
    + Explicit disable TLSv1.3 in the OpenSSL options if not
    supported
    + Support handshake timeout in SniHandler.
    + Extend DNS address supplier interface to provide feedback
  * Fixes of 4.1.86:
    + HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360,
    CVE-2022-41881)
    + HTTP Response splitting from assigning header value iterator
    (bsc#1206379, CVE-2022-41915)
    + Revert #12888 for potential task scheduling problems in
    HashedWheelTimer
    + Deprecate ObjectEncoder/ObjectDecoder
    + HPACK dynamic table size update must happen at the beginning
    of the header block
  * Fixes of 4.1.85:
    + A bug in FlowControlHandler that broke auto-read has been
    fixed
    + The HTTP/2 HPACK encoder is now faster at encoding headers
    that have many values
    + A potential memory leak bug has been fixed in the pooled
    allocator
    + Fix an issue with the Blockhound integration, which could
    cause the MacOSDnsServerAddressStreamProvider to be flagged
    as making blocking calls
    + Inconsitencies in how epoll, kqueue, and NIO handle RDHUP have
    been fixed
    + ByteToMessageDecoder now handle situations where the same
    ByteBuf instance is read multiple times
    + The check that ensures the HTTP/1 Content-Length header is
    unique, now no longer causes headers to be rearranged (change
    their order)
    + Fix a NullPointerException bug with class initialisation order
    between InternalLogger and InternalThreadLocalMap
    + When the netty-resolver-dns-native-macos classes can't load
    their native bindings, they now only print a short error
    message instead of the huge stack trace it printed previously.
    The stack trace is still included if DEBUG logging is enabled
    + The Graal native-image meta-data is now placed in the
    recommended location, and no longer causes warnings to be
    printed
    + The HTTP/1 and HTTP/2 codecs now properly support RFC 8297
    Early Hints
    + Subclasses of FastThreadLocalThread can now tell the Netty
    Blockhound integration that they should be allowed to make
    blocking calls
    + Validation of HTTP/2 connection headers have been moved from
    Http2Headers to HpackDecoder, so that outgoing headers are
    not validated
  * Fixes of 4.1.84:
    + HTTP/2 header values with invalid characters are now rejected
    in header validation
    + We now automatically generate conditional meta-data for
    native-image use, making GraalVM support more reliable
    + Fix a scalability issue caused by instanceof and check-cast
    checks that lead to false-sharing on the
    Klass::secondary_super_cache field in the JVM
    (See JDK-8180450)
    + Made the HTTP/2 HPACK static table implementation faster by
    using a perfect hash function
    + Fixed a bug in our PEMParser when PEM files have multiple
    objects, and BouncyCastle is on the classpath
  * Fixes of 4.1.82:
    + Fix a NullPointerException bug when calling forEachByte on
    nested CompositeByteBufs
    + Relax an overly strict HTTP/2 header validation check that was
    rejecting requests from Chrome and Firefox
    + The OpenSSL and BoringSSL implementations now respect the
    jdk.tls.client.protocols and jdk.tls.server.protocols system
    properties, making them react to these in the same way the JDK
    SSL provider does
  * Fixes of 4.1.81:
    + Fix a regression SslContext private key loading
    + Fix a bug in SslContext private key reading fall-back path
    + Fix a buffer leak regression in HttpClientCodec
    + Fix a bug where some HttpMessage implementations, that also
    implement HttpContent, were not handled correctly
    + The MessageFormatter and FormattingTuple classes are now
    usable in the public API
    + Connection related headers in HTTP/2 frames are now rejected,
    in compliance with the specification
  * Fixes of 4.1.80:
    + HttpObjectEncoder scalability issue due to instanceof checks
    + Improve logging when MacOSDnsServerAddressStreamProvider
    cannot be found/loaded
    + Replace stdlib write/read with send/recv
    + Support for pkcs1
    + Add Blockhound exceptions for the PooledByteBufAllocator
    + Fix epoll bug when receiving zero-sized datagrams
    + Avoid including header values in header validation failure
    exceptions
    + Avoid allocating large buffers in JdkZlibEncoder
    + Native Image Support: Set
    IS_EXPLICIT_TRY_REFLECTION_SET_ACCESSIBLE to true by default
    for native images
    + We need to use disconnectx(...) on macOS
    + Replace synchronized with Java Locks on the allocator
    + Don't use static instances of FixedRecvByteBufAllocator
    + Add escaping for stomp headers
  * Fixes of 4.1.79:
    + The PEM certificate parser is no longer susceptible to
    exponential back-off
    + Non-standard extra ampersands in HTTP POST bodies are no
    longer rejected
    + An io.netty.osClassifiers system property has been added to
    avoid reading os-release files
    + Fix a bug in SslHandler so handlerRemoved works properly even
    if handlerAdded throws an exception
    + Use the correct OSGi processor directive on aarch64, making it
    possible to use OSGi on ARM
    + HTTP paths that begin with a double-slash are now parsed the
    same way browsers do
    + The isCompleted flag is now correctly preserved on objects
    from HttpData.retainedDuplicate()
    + The HttpUtil.isOriginForm() and isAsteriskForm() methods now
    correctly conform with RFC 7230
    + Fix an issue that allowed the multicast methods on
    EpollDatagramChannel to be called outside of an event-loop
    thread
    + Support for the LoongArch64 processor architecture has been
    added
  * Fixes of 4.1.78:
    + Fix a bug where an OPT record was added to DNS queries that
    already had such a record
    + Fix a bug that caused an error when files uploaded with HTTP
    POST contained a backslash in their name
    + Fix an issue in the BlockHound integration that could
    occasionally cause NetUtil to be reported as performing
    blocking operations
    + A similar BlockHound issue was fixed for the JdkSslContext
    + Fix a bug that prevented preface or settings frames from
    being flushed, when an HTTP2 connection was established with
    prior-knowledge
    + Fixes a rare NullPointerException that could occur when a
    ReferenceCountedOpenSslEngine threw an OutOfMemoryError from
    its constructor, and was then later finalized
    + The SslHandler now adds the socket file descriptor to the
    BIOs, when the SslEngine supports this (boringssl and
    libressl), which allow tracing and observability tools to
    monitor encryption traffic on a per-connection basis.
    + It is now possible to explicitly step the scheduling clock in
    EmbeddedEventLoop, which is useful for making automated tests
    with deterministic scheduling
  * Fixes of 4.1.77:
    + Local Information Disclosure Vulnerability in Netty on
    Unix-Like systems due temporary files for Java 6 and lower in
    io.netty:netty-codec-http (bsc#1199338, CVE-2022-24823)
    + Upgraded the optional netty-tcnative dependency to version
    2.0.52.Final
    + Fix a bug where Netty fails to load a shaded native library
    + Include classifier in Automatic-Module-Name
    + Check if epoll_pwait2 is implemented
    + Don't call strdup on packagePrefix
    + Enable debugging of asynchronous tasks in Intellij
    + Throwing an exception in case glibc is missing instead of
    segfaulting the JVM
  * Fixes of 4.1.76:
    + Upgraded the optional netty-tcnative dependency to version
    2.0.51.Final
    + Upgraded the optional log4j dependency to version 2.17.2
    + The netty-all module now declare an automatic module name,
    making it useable with Java Modules.
    + It is now possible to configure arbitrary socket options for
    the native epoll and kqueue transports. Refer to your
    operating system documentation for what options are available.
    + It is now possible to explicitly bind channels to either IPv4
    or IPv6.
    + The HTTP/2 header validation that rejects duplicate
    pseudo-headers, which was added in 4.1.75.Final, has been
    changed so it no longer breaks older versions of gRPC.
    " Fix a NullPointerException that was hiding the real cause of
    certain HTTP/2 header decoding errors.
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * no-brotli-zstd.patch
  - &gt; 0004-Disable-Brotli-and-ZStd-compression.patch
  * no-werror.patch
    + rebase
- Removed patches:
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + we have the dependencies, so no need to disable them
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + solve the build breakages differently
- Added patches:
  * 0005-Do-not-use-the-Graal-annotations.patch
  * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + do not use annotations for which we don't have dependencies
  * 0007-Do-not-require-the-tcnative-native-library.patch
    + our tcnative library is installed system-wide</changelog>
</package>
<package pkgid="f49a12f19f627f025fe8cbec133d8e90715608a249afd80df4bd7d6e818eb078" name="netty" arch="ppc64le">
  <version epoch="0" ver="4.1.90" rel="150200.4.14.1"/>
  <changelog author="fstrba@suse.com" date="1573646400">- Initial packaging of netty 4.1.13</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Split pom-only artifacts into a subpackage netty-pom in order
  to generate their dependencies correctly</changelog>
  <changelog author="fstrba@suse.com" date="1586433600">- Added patch:
  * netty-CVE-2020-11612.patch
    + bsc#1168932, CVE-2020-11612
    + bsc#1169082, CVE-2020-10707</changelog>
  <changelog author="fstrba@suse.com" date="1613044800">- Added patch:
  * netty-CVE-2021-21290.patch
    + bsc#1182103, CVE-2021-21290</changelog>
  <changelog author="fstrba@suse.com" date="1613044801">- Upgrade to latest upstream version 4.1.59
- Removed patches:
  * netty-CVE-2020-11612.patch
  * netty-CVE-2021-21290.patch
    + fixes integrated in the upstream sources
  * 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
  * 0002-Remove-NPN.patch
  * 0003-Remove-conscrypt-ALPN.patch
  * 0004-Remove-jetty-ALPN.patch
    + replaced by new patches
- Added patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + remove various optional dependencies that we do not need
  * 0006-revert-Fix-native-image-build.patch
    + Revert changes that introduce a new dependency that we
    do not have
  * no-werror.patch
    + Do not treat warnings as errors
- Build -poms and -javadoc as noarch packages, since they do not
  install anything in arch-dependent directories</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to latest upstream version 4.1.60
  * fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request
    Content-Length header field is not validated by
    'Http2MultiplexHandler'
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
    + rediff to changed context
- Added patch:
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + revert optional disabled cache implementation that conflicts
    with our 0004-Remove-optional-dep-tcnative.patch</changelog>
  <changelog author="fstrba@suse.com" date="1639483200">- Upgrade to latest upstream version 4.1.72
  * fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn't allow
    setting size restrictions for decompressed data
  * fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn't
    restrict chunk length any may buffer skippable chunks in an
    unnecessary way
  * fixes: bsc#1193672, CVE-2021-43797: possible HTTP request
    smuggling due to insufficient validation against control
    characters
  * fixes: bsc#1184203, CVE-2021-21409: request smuggling via
    content-length header
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
  * no-werror.patch
    + rediff to changed context
- Added patch:
  * no-brotli-zstd.patch
    + disable Brotli and Zstd compression, since we lack
    the dependencies needed to build them</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Upgrade to latest upstream version 4.1.75
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to upstreeam version 4.1.90
  * Fixes of 4.1.90:
    + Adding header name of the header which failed validation
    + Fix HttpHeaders.names for non-String headers
    + Save expensive volatile operations in the common hot http
    decoder path
    + Avoid slow type checks against promises on outbound buffer's
    progress
    + Implement NonStickyEventExecutorGroup.inEventLoop
    + Native image: add support for unix domain sockets
    + Use MacOS SDK 10.9 to prevent apple notarization failures
    + Increase errno cache and guard against IOOBE
    + Don't reset BCSSLParameters when setting application protocols
    + WebSocketClientProtocolHandler: add option to disable UTF8
    validation
    + Chunked HTTP length decoding should account for
    whitespaces/ctrl chars
    + Handle NullPointerException thrown from
    NetworkInterface.getNetworkInterfaces()
  * Fixes of 4.1.89:
    + Don't fail on HttpObjectDecoder's maxHeaderSize greater then
    (Integer.MAX_VALUE - 2)
    + dyld: Symbol not found: _netty_jni_util_JNI_OnLoad when
    upgrading from 4.1.87.Final to 4.1.88.Final
  * Fixes of 4.1.88:
    + Speed-up HTTP 1.1 header and line parsing
    + Add StacklessSSLHandshakeException for ClosedChannelException
    + Modify changed CloseWebSocketFrame#statusCode() to change the
    fetch code to unsigned
    + Check if CommandLineTools are installed before trying to
    execute install_name_tool
    + Allow to adjust the GlobalEventExecutor quietPeriod via a
    system property
    + Add SslProvider.isOptionSupported(...)
    + Fix FlowControlHandler's behaviour to pass read events when
    auto-reading is turned off
    + Ensure Http2StreamFrameToHttpObjectCodec#decode doesn't add
    transfer-encoding for 204/304 response
    + Only do extra CNAME query if we couldnt follow the whole CNAME
    chain in the response
    + Include query id when a query failed
    + DnsResolveContext: include expected record types in exception
    message
    + Add necessary native-image configuration files for epoll
    + Create a deep-copy of the Throwable before returning it from
    the cache to prevent possible leaks
    + Always respect completeOncePreferredResolved in
    DnsNameResolver
    + fix brotli compression
    + Optionally depend on bctls-jdk15on
    + Make releasing objects back to Recycler faster
    + Correctly keep track of validExtensions per request / response
    + Add handling of inflight lookups to reduce real queries when
    lookup same hostname
    + DnsQueryContext: include query id and question info in
    exception message
    + AsciiStrings can be batch-encoded
  * Fixes of 4.1.87:
    + Upgrade to latest netty-tcnative release which doesnt link
    libcrypt
    + Add recvmmsg &amp; sendmmsg syscall number for loongarch64
    + Return correct value from SSLSession.getPacketSize() when
    using native SSL implementation
    + Explicit disable TLSv1.3 in the OpenSSL options if not
    supported
    + Support handshake timeout in SniHandler.
    + Extend DNS address supplier interface to provide feedback
  * Fixes of 4.1.86:
    + HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360,
    CVE-2022-41881)
    + HTTP Response splitting from assigning header value iterator
    (bsc#1206379, CVE-2022-41915)
    + Revert #12888 for potential task scheduling problems in
    HashedWheelTimer
    + Deprecate ObjectEncoder/ObjectDecoder
    + HPACK dynamic table size update must happen at the beginning
    of the header block
  * Fixes of 4.1.85:
    + A bug in FlowControlHandler that broke auto-read has been
    fixed
    + The HTTP/2 HPACK encoder is now faster at encoding headers
    that have many values
    + A potential memory leak bug has been fixed in the pooled
    allocator
    + Fix an issue with the Blockhound integration, which could
    cause the MacOSDnsServerAddressStreamProvider to be flagged
    as making blocking calls
    + Inconsitencies in how epoll, kqueue, and NIO handle RDHUP have
    been fixed
    + ByteToMessageDecoder now handle situations where the same
    ByteBuf instance is read multiple times
    + The check that ensures the HTTP/1 Content-Length header is
    unique, now no longer causes headers to be rearranged (change
    their order)
    + Fix a NullPointerException bug with class initialisation order
    between InternalLogger and InternalThreadLocalMap
    + When the netty-resolver-dns-native-macos classes can't load
    their native bindings, they now only print a short error
    message instead of the huge stack trace it printed previously.
    The stack trace is still included if DEBUG logging is enabled
    + The Graal native-image meta-data is now placed in the
    recommended location, and no longer causes warnings to be
    printed
    + The HTTP/1 and HTTP/2 codecs now properly support RFC 8297
    Early Hints
    + Subclasses of FastThreadLocalThread can now tell the Netty
    Blockhound integration that they should be allowed to make
    blocking calls
    + Validation of HTTP/2 connection headers have been moved from
    Http2Headers to HpackDecoder, so that outgoing headers are
    not validated
  * Fixes of 4.1.84:
    + HTTP/2 header values with invalid characters are now rejected
    in header validation
    + We now automatically generate conditional meta-data for
    native-image use, making GraalVM support more reliable
    + Fix a scalability issue caused by instanceof and check-cast
    checks that lead to false-sharing on the
    Klass::secondary_super_cache field in the JVM
    (See JDK-8180450)
    + Made the HTTP/2 HPACK static table implementation faster by
    using a perfect hash function
    + Fixed a bug in our PEMParser when PEM files have multiple
    objects, and BouncyCastle is on the classpath
  * Fixes of 4.1.82:
    + Fix a NullPointerException bug when calling forEachByte on
    nested CompositeByteBufs
    + Relax an overly strict HTTP/2 header validation check that was
    rejecting requests from Chrome and Firefox
    + The OpenSSL and BoringSSL implementations now respect the
    jdk.tls.client.protocols and jdk.tls.server.protocols system
    properties, making them react to these in the same way the JDK
    SSL provider does
  * Fixes of 4.1.81:
    + Fix a regression SslContext private key loading
    + Fix a bug in SslContext private key reading fall-back path
    + Fix a buffer leak regression in HttpClientCodec
    + Fix a bug where some HttpMessage implementations, that also
    implement HttpContent, were not handled correctly
    + The MessageFormatter and FormattingTuple classes are now
    usable in the public API
    + Connection related headers in HTTP/2 frames are now rejected,
    in compliance with the specification
  * Fixes of 4.1.80:
    + HttpObjectEncoder scalability issue due to instanceof checks
    + Improve logging when MacOSDnsServerAddressStreamProvider
    cannot be found/loaded
    + Replace stdlib write/read with send/recv
    + Support for pkcs1
    + Add Blockhound exceptions for the PooledByteBufAllocator
    + Fix epoll bug when receiving zero-sized datagrams
    + Avoid including header values in header validation failure
    exceptions
    + Avoid allocating large buffers in JdkZlibEncoder
    + Native Image Support: Set
    IS_EXPLICIT_TRY_REFLECTION_SET_ACCESSIBLE to true by default
    for native images
    + We need to use disconnectx(...) on macOS
    + Replace synchronized with Java Locks on the allocator
    + Don't use static instances of FixedRecvByteBufAllocator
    + Add escaping for stomp headers
  * Fixes of 4.1.79:
    + The PEM certificate parser is no longer susceptible to
    exponential back-off
    + Non-standard extra ampersands in HTTP POST bodies are no
    longer rejected
    + An io.netty.osClassifiers system property has been added to
    avoid reading os-release files
    + Fix a bug in SslHandler so handlerRemoved works properly even
    if handlerAdded throws an exception
    + Use the correct OSGi processor directive on aarch64, making it
    possible to use OSGi on ARM
    + HTTP paths that begin with a double-slash are now parsed the
    same way browsers do
    + The isCompleted flag is now correctly preserved on objects
    from HttpData.retainedDuplicate()
    + The HttpUtil.isOriginForm() and isAsteriskForm() methods now
    correctly conform with RFC 7230
    + Fix an issue that allowed the multicast methods on
    EpollDatagramChannel to be called outside of an event-loop
    thread
    + Support for the LoongArch64 processor architecture has been
    added
  * Fixes of 4.1.78:
    + Fix a bug where an OPT record was added to DNS queries that
    already had such a record
    + Fix a bug that caused an error when files uploaded with HTTP
    POST contained a backslash in their name
    + Fix an issue in the BlockHound integration that could
    occasionally cause NetUtil to be reported as performing
    blocking operations
    + A similar BlockHound issue was fixed for the JdkSslContext
    + Fix a bug that prevented preface or settings frames from
    being flushed, when an HTTP2 connection was established with
    prior-knowledge
    + Fixes a rare NullPointerException that could occur when a
    ReferenceCountedOpenSslEngine threw an OutOfMemoryError from
    its constructor, and was then later finalized
    + The SslHandler now adds the socket file descriptor to the
    BIOs, when the SslEngine supports this (boringssl and
    libressl), which allow tracing and observability tools to
    monitor encryption traffic on a per-connection basis.
    + It is now possible to explicitly step the scheduling clock in
    EmbeddedEventLoop, which is useful for making automated tests
    with deterministic scheduling
  * Fixes of 4.1.77:
    + Local Information Disclosure Vulnerability in Netty on
    Unix-Like systems due temporary files for Java 6 and lower in
    io.netty:netty-codec-http (bsc#1199338, CVE-2022-24823)
    + Upgraded the optional netty-tcnative dependency to version
    2.0.52.Final
    + Fix a bug where Netty fails to load a shaded native library
    + Include classifier in Automatic-Module-Name
    + Check if epoll_pwait2 is implemented
    + Don't call strdup on packagePrefix
    + Enable debugging of asynchronous tasks in Intellij
    + Throwing an exception in case glibc is missing instead of
    segfaulting the JVM
  * Fixes of 4.1.76:
    + Upgraded the optional netty-tcnative dependency to version
    2.0.51.Final
    + Upgraded the optional log4j dependency to version 2.17.2
    + The netty-all module now declare an automatic module name,
    making it useable with Java Modules.
    + It is now possible to configure arbitrary socket options for
    the native epoll and kqueue transports. Refer to your
    operating system documentation for what options are available.
    + It is now possible to explicitly bind channels to either IPv4
    or IPv6.
    + The HTTP/2 header validation that rejects duplicate
    pseudo-headers, which was added in 4.1.75.Final, has been
    changed so it no longer breaks older versions of gRPC.
    " Fix a NullPointerException that was hiding the real cause of
    certain HTTP/2 header decoding errors.
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * no-brotli-zstd.patch
  - &gt; 0004-Disable-Brotli-and-ZStd-compression.patch
  * no-werror.patch
    + rebase
- Removed patches:
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + we have the dependencies, so no need to disable them
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + solve the build breakages differently
- Added patches:
  * 0005-Do-not-use-the-Graal-annotations.patch
  * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + do not use annotations for which we don't have dependencies
  * 0007-Do-not-require-the-tcnative-native-library.patch
    + our tcnative library is installed system-wide</changelog>
</package>
<package pkgid="0cad04db65d0525f907ca6773115ef601a58c490ad3f2c65788530998c1158cf" name="netty" arch="s390x">
  <version epoch="0" ver="4.1.90" rel="150200.4.14.1"/>
  <changelog author="fstrba@suse.com" date="1573646400">- Initial packaging of netty 4.1.13</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Split pom-only artifacts into a subpackage netty-pom in order
  to generate their dependencies correctly</changelog>
  <changelog author="fstrba@suse.com" date="1586433600">- Added patch:
  * netty-CVE-2020-11612.patch
    + bsc#1168932, CVE-2020-11612
    + bsc#1169082, CVE-2020-10707</changelog>
  <changelog author="fstrba@suse.com" date="1613044800">- Added patch:
  * netty-CVE-2021-21290.patch
    + bsc#1182103, CVE-2021-21290</changelog>
  <changelog author="fstrba@suse.com" date="1613044801">- Upgrade to latest upstream version 4.1.59
- Removed patches:
  * netty-CVE-2020-11612.patch
  * netty-CVE-2021-21290.patch
    + fixes integrated in the upstream sources
  * 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
  * 0002-Remove-NPN.patch
  * 0003-Remove-conscrypt-ALPN.patch
  * 0004-Remove-jetty-ALPN.patch
    + replaced by new patches
- Added patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + remove various optional dependencies that we do not need
  * 0006-revert-Fix-native-image-build.patch
    + Revert changes that introduce a new dependency that we
    do not have
  * no-werror.patch
    + Do not treat warnings as errors
- Build -poms and -javadoc as noarch packages, since they do not
  install anything in arch-dependent directories</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to latest upstream version 4.1.60
  * fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request
    Content-Length header field is not validated by
    'Http2MultiplexHandler'
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
    + rediff to changed context
- Added patch:
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + revert optional disabled cache implementation that conflicts
    with our 0004-Remove-optional-dep-tcnative.patch</changelog>
  <changelog author="fstrba@suse.com" date="1639483200">- Upgrade to latest upstream version 4.1.72
  * fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn't allow
    setting size restrictions for decompressed data
  * fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn't
    restrict chunk length any may buffer skippable chunks in an
    unnecessary way
  * fixes: bsc#1193672, CVE-2021-43797: possible HTTP request
    smuggling due to insufficient validation against control
    characters
  * fixes: bsc#1184203, CVE-2021-21409: request smuggling via
    content-length header
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
  * no-werror.patch
    + rediff to changed context
- Added patch:
  * no-brotli-zstd.patch
    + disable Brotli and Zstd compression, since we lack
    the dependencies needed to build them</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Upgrade to latest upstream version 4.1.75
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to upstreeam version 4.1.90
  * Fixes of 4.1.90:
    + Adding header name of the header which failed validation
    + Fix HttpHeaders.names for non-String headers
    + Save expensive volatile operations in the common hot http
    decoder path
    + Avoid slow type checks against promises on outbound buffer's
    progress
    + Implement NonStickyEventExecutorGroup.inEventLoop
    + Native image: add support for unix domain sockets
    + Use MacOS SDK 10.9 to prevent apple notarization failures
    + Increase errno cache and guard against IOOBE
    + Don't reset BCSSLParameters when setting application protocols
    + WebSocketClientProtocolHandler: add option to disable UTF8
    validation
    + Chunked HTTP length decoding should account for
    whitespaces/ctrl chars
    + Handle NullPointerException thrown from
    NetworkInterface.getNetworkInterfaces()
  * Fixes of 4.1.89:
    + Don't fail on HttpObjectDecoder's maxHeaderSize greater then
    (Integer.MAX_VALUE - 2)
    + dyld: Symbol not found: _netty_jni_util_JNI_OnLoad when
    upgrading from 4.1.87.Final to 4.1.88.Final
  * Fixes of 4.1.88:
    + Speed-up HTTP 1.1 header and line parsing
    + Add StacklessSSLHandshakeException for ClosedChannelException
    + Modify changed CloseWebSocketFrame#statusCode() to change the
    fetch code to unsigned
    + Check if CommandLineTools are installed before trying to
    execute install_name_tool
    + Allow to adjust the GlobalEventExecutor quietPeriod via a
    system property
    + Add SslProvider.isOptionSupported(...)
    + Fix FlowControlHandler's behaviour to pass read events when
    auto-reading is turned off
    + Ensure Http2StreamFrameToHttpObjectCodec#decode doesn't add
    transfer-encoding for 204/304 response
    + Only do extra CNAME query if we couldnt follow the whole CNAME
    chain in the response
    + Include query id when a query failed
    + DnsResolveContext: include expected record types in exception
    message
    + Add necessary native-image configuration files for epoll
    + Create a deep-copy of the Throwable before returning it from
    the cache to prevent possible leaks
    + Always respect completeOncePreferredResolved in
    DnsNameResolver
    + fix brotli compression
    + Optionally depend on bctls-jdk15on
    + Make releasing objects back to Recycler faster
    + Correctly keep track of validExtensions per request / response
    + Add handling of inflight lookups to reduce real queries when
    lookup same hostname
    + DnsQueryContext: include query id and question info in
    exception message
    + AsciiStrings can be batch-encoded
  * Fixes of 4.1.87:
    + Upgrade to latest netty-tcnative release which doesnt link
    libcrypt
    + Add recvmmsg &amp; sendmmsg syscall number for loongarch64
    + Return correct value from SSLSession.getPacketSize() when
    using native SSL implementation
    + Explicit disable TLSv1.3 in the OpenSSL options if not
    supported
    + Support handshake timeout in SniHandler.
    + Extend DNS address supplier interface to provide feedback
  * Fixes of 4.1.86:
    + HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360,
    CVE-2022-41881)
    + HTTP Response splitting from assigning header value iterator
    (bsc#1206379, CVE-2022-41915)
    + Revert #12888 for potential task scheduling problems in
    HashedWheelTimer
    + Deprecate ObjectEncoder/ObjectDecoder
    + HPACK dynamic table size update must happen at the beginning
    of the header block
  * Fixes of 4.1.85:
    + A bug in FlowControlHandler that broke auto-read has been
    fixed
    + The HTTP/2 HPACK encoder is now faster at encoding headers
    that have many values
    + A potential memory leak bug has been fixed in the pooled
    allocator
    + Fix an issue with the Blockhound integration, which could
    cause the MacOSDnsServerAddressStreamProvider to be flagged
    as making blocking calls
    + Inconsitencies in how epoll, kqueue, and NIO handle RDHUP have
    been fixed
    + ByteToMessageDecoder now handle situations where the same
    ByteBuf instance is read multiple times
    + The check that ensures the HTTP/1 Content-Length header is
    unique, now no longer causes headers to be rearranged (change
    their order)
    + Fix a NullPointerException bug with class initialisation order
    between InternalLogger and InternalThreadLocalMap
    + When the netty-resolver-dns-native-macos classes can't load
    their native bindings, they now only print a short error
    message instead of the huge stack trace it printed previously.
    The stack trace is still included if DEBUG logging is enabled
    + The Graal native-image meta-data is now placed in the
    recommended location, and no longer causes warnings to be
    printed
    + The HTTP/1 and HTTP/2 codecs now properly support RFC 8297
    Early Hints
    + Subclasses of FastThreadLocalThread can now tell the Netty
    Blockhound integration that they should be allowed to make
    blocking calls
    + Validation of HTTP/2 connection headers have been moved from
    Http2Headers to HpackDecoder, so that outgoing headers are
    not validated
  * Fixes of 4.1.84:
    + HTTP/2 header values with invalid characters are now rejected
    in header validation
    + We now automatically generate conditional meta-data for
    native-image use, making GraalVM support more reliable
    + Fix a scalability issue caused by instanceof and check-cast
    checks that lead to false-sharing on the
    Klass::secondary_super_cache field in the JVM
    (See JDK-8180450)
    + Made the HTTP/2 HPACK static table implementation faster by
    using a perfect hash function
    + Fixed a bug in our PEMParser when PEM files have multiple
    objects, and BouncyCastle is on the classpath
  * Fixes of 4.1.82:
    + Fix a NullPointerException bug when calling forEachByte on
    nested CompositeByteBufs
    + Relax an overly strict HTTP/2 header validation check that was
    rejecting requests from Chrome and Firefox
    + The OpenSSL and BoringSSL implementations now respect the
    jdk.tls.client.protocols and jdk.tls.server.protocols system
    properties, making them react to these in the same way the JDK
    SSL provider does
  * Fixes of 4.1.81:
    + Fix a regression SslContext private key loading
    + Fix a bug in SslContext private key reading fall-back path
    + Fix a buffer leak regression in HttpClientCodec
    + Fix a bug where some HttpMessage implementations, that also
    implement HttpContent, were not handled correctly
    + The MessageFormatter and FormattingTuple classes are now
    usable in the public API
    + Connection related headers in HTTP/2 frames are now rejected,
    in compliance with the specification
  * Fixes of 4.1.80:
    + HttpObjectEncoder scalability issue due to instanceof checks
    + Improve logging when MacOSDnsServerAddressStreamProvider
    cannot be found/loaded
    + Replace stdlib write/read with send/recv
    + Support for pkcs1
    + Add Blockhound exceptions for the PooledByteBufAllocator
    + Fix epoll bug when receiving zero-sized datagrams
    + Avoid including header values in header validation failure
    exceptions
    + Avoid allocating large buffers in JdkZlibEncoder
    + Native Image Support: Set
    IS_EXPLICIT_TRY_REFLECTION_SET_ACCESSIBLE to true by default
    for native images
    + We need to use disconnectx(...) on macOS
    + Replace synchronized with Java Locks on the allocator
    + Don't use static instances of FixedRecvByteBufAllocator
    + Add escaping for stomp headers
  * Fixes of 4.1.79:
    + The PEM certificate parser is no longer susceptible to
    exponential back-off
    + Non-standard extra ampersands in HTTP POST bodies are no
    longer rejected
    + An io.netty.osClassifiers system property has been added to
    avoid reading os-release files
    + Fix a bug in SslHandler so handlerRemoved works properly even
    if handlerAdded throws an exception
    + Use the correct OSGi processor directive on aarch64, making it
    possible to use OSGi on ARM
    + HTTP paths that begin with a double-slash are now parsed the
    same way browsers do
    + The isCompleted flag is now correctly preserved on objects
    from HttpData.retainedDuplicate()
    + The HttpUtil.isOriginForm() and isAsteriskForm() methods now
    correctly conform with RFC 7230
    + Fix an issue that allowed the multicast methods on
    EpollDatagramChannel to be called outside of an event-loop
    thread
    + Support for the LoongArch64 processor architecture has been
    added
  * Fixes of 4.1.78:
    + Fix a bug where an OPT record was added to DNS queries that
    already had such a record
    + Fix a bug that caused an error when files uploaded with HTTP
    POST contained a backslash in their name
    + Fix an issue in the BlockHound integration that could
    occasionally cause NetUtil to be reported as performing
    blocking operations
    + A similar BlockHound issue was fixed for the JdkSslContext
    + Fix a bug that prevented preface or settings frames from
    being flushed, when an HTTP2 connection was established with
    prior-knowledge
    + Fixes a rare NullPointerException that could occur when a
    ReferenceCountedOpenSslEngine threw an OutOfMemoryError from
    its constructor, and was then later finalized
    + The SslHandler now adds the socket file descriptor to the
    BIOs, when the SslEngine supports this (boringssl and
    libressl), which allow tracing and observability tools to
    monitor encryption traffic on a per-connection basis.
    + It is now possible to explicitly step the scheduling clock in
    EmbeddedEventLoop, which is useful for making automated tests
    with deterministic scheduling
  * Fixes of 4.1.77:
    + Local Information Disclosure Vulnerability in Netty on
    Unix-Like systems due temporary files for Java 6 and lower in
    io.netty:netty-codec-http (bsc#1199338, CVE-2022-24823)
    + Upgraded the optional netty-tcnative dependency to version
    2.0.52.Final
    + Fix a bug where Netty fails to load a shaded native library
    + Include classifier in Automatic-Module-Name
    + Check if epoll_pwait2 is implemented
    + Don't call strdup on packagePrefix
    + Enable debugging of asynchronous tasks in Intellij
    + Throwing an exception in case glibc is missing instead of
    segfaulting the JVM
  * Fixes of 4.1.76:
    + Upgraded the optional netty-tcnative dependency to version
    2.0.51.Final
    + Upgraded the optional log4j dependency to version 2.17.2
    + The netty-all module now declare an automatic module name,
    making it useable with Java Modules.
    + It is now possible to configure arbitrary socket options for
    the native epoll and kqueue transports. Refer to your
    operating system documentation for what options are available.
    + It is now possible to explicitly bind channels to either IPv4
    or IPv6.
    + The HTTP/2 header validation that rejects duplicate
    pseudo-headers, which was added in 4.1.75.Final, has been
    changed so it no longer breaks older versions of gRPC.
    " Fix a NullPointerException that was hiding the real cause of
    certain HTTP/2 header decoding errors.
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * no-brotli-zstd.patch
  - &gt; 0004-Disable-Brotli-and-ZStd-compression.patch
  * no-werror.patch
    + rebase
- Removed patches:
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + we have the dependencies, so no need to disable them
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + solve the build breakages differently
- Added patches:
  * 0005-Do-not-use-the-Graal-annotations.patch
  * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + do not use annotations for which we don't have dependencies
  * 0007-Do-not-require-the-tcnative-native-library.patch
    + our tcnative library is installed system-wide</changelog>
</package>
<package pkgid="ddc4bc648e7c26e40e9257484de5a5e0fb3ff5ab6aaa38f4a810e10f9c41eb44" name="netty" arch="src">
  <version epoch="0" ver="4.1.90" rel="150200.4.14.1"/>
  <changelog author="fstrba@suse.com" date="1573646400">- Initial packaging of netty 4.1.13</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Split pom-only artifacts into a subpackage netty-pom in order
  to generate their dependencies correctly</changelog>
  <changelog author="fstrba@suse.com" date="1586433600">- Added patch:
  * netty-CVE-2020-11612.patch
    + bsc#1168932, CVE-2020-11612
    + bsc#1169082, CVE-2020-10707</changelog>
  <changelog author="fstrba@suse.com" date="1613044800">- Added patch:
  * netty-CVE-2021-21290.patch
    + bsc#1182103, CVE-2021-21290</changelog>
  <changelog author="fstrba@suse.com" date="1613044801">- Upgrade to latest upstream version 4.1.59
- Removed patches:
  * netty-CVE-2020-11612.patch
  * netty-CVE-2021-21290.patch
    + fixes integrated in the upstream sources
  * 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
  * 0002-Remove-NPN.patch
  * 0003-Remove-conscrypt-ALPN.patch
  * 0004-Remove-jetty-ALPN.patch
    + replaced by new patches
- Added patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + remove various optional dependencies that we do not need
  * 0006-revert-Fix-native-image-build.patch
    + Revert changes that introduce a new dependency that we
    do not have
  * no-werror.patch
    + Do not treat warnings as errors
- Build -poms and -javadoc as noarch packages, since they do not
  install anything in arch-dependent directories</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to latest upstream version 4.1.60
  * fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request
    Content-Length header field is not validated by
    'Http2MultiplexHandler'
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
    + rediff to changed context
- Added patch:
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + revert optional disabled cache implementation that conflicts
    with our 0004-Remove-optional-dep-tcnative.patch</changelog>
  <changelog author="fstrba@suse.com" date="1639483200">- Upgrade to latest upstream version 4.1.72
  * fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn't allow
    setting size restrictions for decompressed data
  * fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn't
    restrict chunk length any may buffer skippable chunks in an
    unnecessary way
  * fixes: bsc#1193672, CVE-2021-43797: possible HTTP request
    smuggling due to insufficient validation against control
    characters
  * fixes: bsc#1184203, CVE-2021-21409: request smuggling via
    content-length header
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
  * no-werror.patch
    + rediff to changed context
- Added patch:
  * no-brotli-zstd.patch
    + disable Brotli and Zstd compression, since we lack
    the dependencies needed to build them</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Upgrade to latest upstream version 4.1.75
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to upstreeam version 4.1.90
  * Fixes of 4.1.90:
    + Adding header name of the header which failed validation
    + Fix HttpHeaders.names for non-String headers
    + Save expensive volatile operations in the common hot http
    decoder path
    + Avoid slow type checks against promises on outbound buffer's
    progress
    + Implement NonStickyEventExecutorGroup.inEventLoop
    + Native image: add support for unix domain sockets
    + Use MacOS SDK 10.9 to prevent apple notarization failures
    + Increase errno cache and guard against IOOBE
    + Don't reset BCSSLParameters when setting application protocols
    + WebSocketClientProtocolHandler: add option to disable UTF8
    validation
    + Chunked HTTP length decoding should account for
    whitespaces/ctrl chars
    + Handle NullPointerException thrown from
    NetworkInterface.getNetworkInterfaces()
  * Fixes of 4.1.89:
    + Don't fail on HttpObjectDecoder's maxHeaderSize greater then
    (Integer.MAX_VALUE - 2)
    + dyld: Symbol not found: _netty_jni_util_JNI_OnLoad when
    upgrading from 4.1.87.Final to 4.1.88.Final
  * Fixes of 4.1.88:
    + Speed-up HTTP 1.1 header and line parsing
    + Add StacklessSSLHandshakeException for ClosedChannelException
    + Modify changed CloseWebSocketFrame#statusCode() to change the
    fetch code to unsigned
    + Check if CommandLineTools are installed before trying to
    execute install_name_tool
    + Allow to adjust the GlobalEventExecutor quietPeriod via a
    system property
    + Add SslProvider.isOptionSupported(...)
    + Fix FlowControlHandler's behaviour to pass read events when
    auto-reading is turned off
    + Ensure Http2StreamFrameToHttpObjectCodec#decode doesn't add
    transfer-encoding for 204/304 response
    + Only do extra CNAME query if we couldnt follow the whole CNAME
    chain in the response
    + Include query id when a query failed
    + DnsResolveContext: include expected record types in exception
    message
    + Add necessary native-image configuration files for epoll
    + Create a deep-copy of the Throwable before returning it from
    the cache to prevent possible leaks
    + Always respect completeOncePreferredResolved in
    DnsNameResolver
    + fix brotli compression
    + Optionally depend on bctls-jdk15on
    + Make releasing objects back to Recycler faster
    + Correctly keep track of validExtensions per request / response
    + Add handling of inflight lookups to reduce real queries when
    lookup same hostname
    + DnsQueryContext: include query id and question info in
    exception message
    + AsciiStrings can be batch-encoded
  * Fixes of 4.1.87:
    + Upgrade to latest netty-tcnative release which doesnt link
    libcrypt
    + Add recvmmsg &amp; sendmmsg syscall number for loongarch64
    + Return correct value from SSLSession.getPacketSize() when
    using native SSL implementation
    + Explicit disable TLSv1.3 in the OpenSSL options if not
    supported
    + Support handshake timeout in SniHandler.
    + Extend DNS address supplier interface to provide feedback
  * Fixes of 4.1.86:
    + HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360,
    CVE-2022-41881)
    + HTTP Response splitting from assigning header value iterator
    (bsc#1206379, CVE-2022-41915)
    + Revert #12888 for potential task scheduling problems in
    HashedWheelTimer
    + Deprecate ObjectEncoder/ObjectDecoder
    + HPACK dynamic table size update must happen at the beginning
    of the header block
  * Fixes of 4.1.85:
    + A bug in FlowControlHandler that broke auto-read has been
    fixed
    + The HTTP/2 HPACK encoder is now faster at encoding headers
    that have many values
    + A potential memory leak bug has been fixed in the pooled
    allocator
    + Fix an issue with the Blockhound integration, which could
    cause the MacOSDnsServerAddressStreamProvider to be flagged
    as making blocking calls
    + Inconsitencies in how epoll, kqueue, and NIO handle RDHUP have
    been fixed
    + ByteToMessageDecoder now handle situations where the same
    ByteBuf instance is read multiple times
    + The check that ensures the HTTP/1 Content-Length header is
    unique, now no longer causes headers to be rearranged (change
    their order)
    + Fix a NullPointerException bug with class initialisation order
    between InternalLogger and InternalThreadLocalMap
    + When the netty-resolver-dns-native-macos classes can't load
    their native bindings, they now only print a short error
    message instead of the huge stack trace it printed previously.
    The stack trace is still included if DEBUG logging is enabled
    + The Graal native-image meta-data is now placed in the
    recommended location, and no longer causes warnings to be
    printed
    + The HTTP/1 and HTTP/2 codecs now properly support RFC 8297
    Early Hints
    + Subclasses of FastThreadLocalThread can now tell the Netty
    Blockhound integration that they should be allowed to make
    blocking calls
    + Validation of HTTP/2 connection headers have been moved from
    Http2Headers to HpackDecoder, so that outgoing headers are
    not validated
  * Fixes of 4.1.84:
    + HTTP/2 header values with invalid characters are now rejected
    in header validation
    + We now automatically generate conditional meta-data for
    native-image use, making GraalVM support more reliable
    + Fix a scalability issue caused by instanceof and check-cast
    checks that lead to false-sharing on the
    Klass::secondary_super_cache field in the JVM
    (See JDK-8180450)
    + Made the HTTP/2 HPACK static table implementation faster by
    using a perfect hash function
    + Fixed a bug in our PEMParser when PEM files have multiple
    objects, and BouncyCastle is on the classpath
  * Fixes of 4.1.82:
    + Fix a NullPointerException bug when calling forEachByte on
    nested CompositeByteBufs
    + Relax an overly strict HTTP/2 header validation check that was
    rejecting requests from Chrome and Firefox
    + The OpenSSL and BoringSSL implementations now respect the
    jdk.tls.client.protocols and jdk.tls.server.protocols system
    properties, making them react to these in the same way the JDK
    SSL provider does
  * Fixes of 4.1.81:
    + Fix a regression SslContext private key loading
    + Fix a bug in SslContext private key reading fall-back path
    + Fix a buffer leak regression in HttpClientCodec
    + Fix a bug where some HttpMessage implementations, that also
    implement HttpContent, were not handled correctly
    + The MessageFormatter and FormattingTuple classes are now
    usable in the public API
    + Connection related headers in HTTP/2 frames are now rejected,
    in compliance with the specification
  * Fixes of 4.1.80:
    + HttpObjectEncoder scalability issue due to instanceof checks
    + Improve logging when MacOSDnsServerAddressStreamProvider
    cannot be found/loaded
    + Replace stdlib write/read with send/recv
    + Support for pkcs1
    + Add Blockhound exceptions for the PooledByteBufAllocator
    + Fix epoll bug when receiving zero-sized datagrams
    + Avoid including header values in header validation failure
    exceptions
    + Avoid allocating large buffers in JdkZlibEncoder
    + Native Image Support: Set
    IS_EXPLICIT_TRY_REFLECTION_SET_ACCESSIBLE to true by default
    for native images
    + We need to use disconnectx(...) on macOS
    + Replace synchronized with Java Locks on the allocator
    + Don't use static instances of FixedRecvByteBufAllocator
    + Add escaping for stomp headers
  * Fixes of 4.1.79:
    + The PEM certificate parser is no longer susceptible to
    exponential back-off
    + Non-standard extra ampersands in HTTP POST bodies are no
    longer rejected
    + An io.netty.osClassifiers system property has been added to
    avoid reading os-release files
    + Fix a bug in SslHandler so handlerRemoved works properly even
    if handlerAdded throws an exception
    + Use the correct OSGi processor directive on aarch64, making it
    possible to use OSGi on ARM
    + HTTP paths that begin with a double-slash are now parsed the
    same way browsers do
    + The isCompleted flag is now correctly preserved on objects
    from HttpData.retainedDuplicate()
    + The HttpUtil.isOriginForm() and isAsteriskForm() methods now
    correctly conform with RFC 7230
    + Fix an issue that allowed the multicast methods on
    EpollDatagramChannel to be called outside of an event-loop
    thread
    + Support for the LoongArch64 processor architecture has been
    added
  * Fixes of 4.1.78:
    + Fix a bug where an OPT record was added to DNS queries that
    already had such a record
    + Fix a bug that caused an error when files uploaded with HTTP
    POST contained a backslash in their name
    + Fix an issue in the BlockHound integration that could
    occasionally cause NetUtil to be reported as performing
    blocking operations
    + A similar BlockHound issue was fixed for the JdkSslContext
    + Fix a bug that prevented preface or settings frames from
    being flushed, when an HTTP2 connection was established with
    prior-knowledge
    + Fixes a rare NullPointerException that could occur when a
    ReferenceCountedOpenSslEngine threw an OutOfMemoryError from
    its constructor, and was then later finalized
    + The SslHandler now adds the socket file descriptor to the
    BIOs, when the SslEngine supports this (boringssl and
    libressl), which allow tracing and observability tools to
    monitor encryption traffic on a per-connection basis.
    + It is now possible to explicitly step the scheduling clock in
    EmbeddedEventLoop, which is useful for making automated tests
    with deterministic scheduling
  * Fixes of 4.1.77:
    + Local Information Disclosure Vulnerability in Netty on
    Unix-Like systems due temporary files for Java 6 and lower in
    io.netty:netty-codec-http (bsc#1199338, CVE-2022-24823)
    + Upgraded the optional netty-tcnative dependency to version
    2.0.52.Final
    + Fix a bug where Netty fails to load a shaded native library
    + Include classifier in Automatic-Module-Name
    + Check if epoll_pwait2 is implemented
    + Don't call strdup on packagePrefix
    + Enable debugging of asynchronous tasks in Intellij
    + Throwing an exception in case glibc is missing instead of
    segfaulting the JVM
  * Fixes of 4.1.76:
    + Upgraded the optional netty-tcnative dependency to version
    2.0.51.Final
    + Upgraded the optional log4j dependency to version 2.17.2
    + The netty-all module now declare an automatic module name,
    making it useable with Java Modules.
    + It is now possible to configure arbitrary socket options for
    the native epoll and kqueue transports. Refer to your
    operating system documentation for what options are available.
    + It is now possible to explicitly bind channels to either IPv4
    or IPv6.
    + The HTTP/2 header validation that rejects duplicate
    pseudo-headers, which was added in 4.1.75.Final, has been
    changed so it no longer breaks older versions of gRPC.
    " Fix a NullPointerException that was hiding the real cause of
    certain HTTP/2 header decoding errors.
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * no-brotli-zstd.patch
  - &gt; 0004-Disable-Brotli-and-ZStd-compression.patch
  * no-werror.patch
    + rebase
- Removed patches:
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + we have the dependencies, so no need to disable them
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + solve the build breakages differently
- Added patches:
  * 0005-Do-not-use-the-Graal-annotations.patch
  * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + do not use annotations for which we don't have dependencies
  * 0007-Do-not-require-the-tcnative-native-library.patch
    + our tcnative library is installed system-wide</changelog>
</package>
<package pkgid="3ba9aa39dcd148948c569d12adbc3f071910624be5667669747fe72194dd62a2" name="netty" arch="x86_64">
  <version epoch="0" ver="4.1.90" rel="150200.4.14.1"/>
  <changelog author="fstrba@suse.com" date="1573646400">- Initial packaging of netty 4.1.13</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Split pom-only artifacts into a subpackage netty-pom in order
  to generate their dependencies correctly</changelog>
  <changelog author="fstrba@suse.com" date="1586433600">- Added patch:
  * netty-CVE-2020-11612.patch
    + bsc#1168932, CVE-2020-11612
    + bsc#1169082, CVE-2020-10707</changelog>
  <changelog author="fstrba@suse.com" date="1613044800">- Added patch:
  * netty-CVE-2021-21290.patch
    + bsc#1182103, CVE-2021-21290</changelog>
  <changelog author="fstrba@suse.com" date="1613044801">- Upgrade to latest upstream version 4.1.59
- Removed patches:
  * netty-CVE-2020-11612.patch
  * netty-CVE-2021-21290.patch
    + fixes integrated in the upstream sources
  * 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
  * 0002-Remove-NPN.patch
  * 0003-Remove-conscrypt-ALPN.patch
  * 0004-Remove-jetty-ALPN.patch
    + replaced by new patches
- Added patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + remove various optional dependencies that we do not need
  * 0006-revert-Fix-native-image-build.patch
    + Revert changes that introduce a new dependency that we
    do not have
  * no-werror.patch
    + Do not treat warnings as errors
- Build -poms and -javadoc as noarch packages, since they do not
  install anything in arch-dependent directories</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to latest upstream version 4.1.60
  * fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request
    Content-Length header field is not validated by
    'Http2MultiplexHandler'
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
    + rediff to changed context
- Added patch:
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + revert optional disabled cache implementation that conflicts
    with our 0004-Remove-optional-dep-tcnative.patch</changelog>
  <changelog author="fstrba@suse.com" date="1639483200">- Upgrade to latest upstream version 4.1.72
  * fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn't allow
    setting size restrictions for decompressed data
  * fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn't
    restrict chunk length any may buffer skippable chunks in an
    unnecessary way
  * fixes: bsc#1193672, CVE-2021-43797: possible HTTP request
    smuggling due to insufficient validation against control
    characters
  * fixes: bsc#1184203, CVE-2021-21409: request smuggling via
    content-length header
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
  * no-werror.patch
    + rediff to changed context
- Added patch:
  * no-brotli-zstd.patch
    + disable Brotli and Zstd compression, since we lack
    the dependencies needed to build them</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Upgrade to latest upstream version 4.1.75
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to upstreeam version 4.1.90
  * Fixes of 4.1.90:
    + Adding header name of the header which failed validation
    + Fix HttpHeaders.names for non-String headers
    + Save expensive volatile operations in the common hot http
    decoder path
    + Avoid slow type checks against promises on outbound buffer's
    progress
    + Implement NonStickyEventExecutorGroup.inEventLoop
    + Native image: add support for unix domain sockets
    + Use MacOS SDK 10.9 to prevent apple notarization failures
    + Increase errno cache and guard against IOOBE
    + Don't reset BCSSLParameters when setting application protocols
    + WebSocketClientProtocolHandler: add option to disable UTF8
    validation
    + Chunked HTTP length decoding should account for
    whitespaces/ctrl chars
    + Handle NullPointerException thrown from
    NetworkInterface.getNetworkInterfaces()
  * Fixes of 4.1.89:
    + Don't fail on HttpObjectDecoder's maxHeaderSize greater then
    (Integer.MAX_VALUE - 2)
    + dyld: Symbol not found: _netty_jni_util_JNI_OnLoad when
    upgrading from 4.1.87.Final to 4.1.88.Final
  * Fixes of 4.1.88:
    + Speed-up HTTP 1.1 header and line parsing
    + Add StacklessSSLHandshakeException for ClosedChannelException
    + Modify changed CloseWebSocketFrame#statusCode() to change the
    fetch code to unsigned
    + Check if CommandLineTools are installed before trying to
    execute install_name_tool
    + Allow to adjust the GlobalEventExecutor quietPeriod via a
    system property
    + Add SslProvider.isOptionSupported(...)
    + Fix FlowControlHandler's behaviour to pass read events when
    auto-reading is turned off
    + Ensure Http2StreamFrameToHttpObjectCodec#decode doesn't add
    transfer-encoding for 204/304 response
    + Only do extra CNAME query if we couldnt follow the whole CNAME
    chain in the response
    + Include query id when a query failed
    + DnsResolveContext: include expected record types in exception
    message
    + Add necessary native-image configuration files for epoll
    + Create a deep-copy of the Throwable before returning it from
    the cache to prevent possible leaks
    + Always respect completeOncePreferredResolved in
    DnsNameResolver
    + fix brotli compression
    + Optionally depend on bctls-jdk15on
    + Make releasing objects back to Recycler faster
    + Correctly keep track of validExtensions per request / response
    + Add handling of inflight lookups to reduce real queries when
    lookup same hostname
    + DnsQueryContext: include query id and question info in
    exception message
    + AsciiStrings can be batch-encoded
  * Fixes of 4.1.87:
    + Upgrade to latest netty-tcnative release which doesnt link
    libcrypt
    + Add recvmmsg &amp; sendmmsg syscall number for loongarch64
    + Return correct value from SSLSession.getPacketSize() when
    using native SSL implementation
    + Explicit disable TLSv1.3 in the OpenSSL options if not
    supported
    + Support handshake timeout in SniHandler.
    + Extend DNS address supplier interface to provide feedback
  * Fixes of 4.1.86:
    + HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360,
    CVE-2022-41881)
    + HTTP Response splitting from assigning header value iterator
    (bsc#1206379, CVE-2022-41915)
    + Revert #12888 for potential task scheduling problems in
    HashedWheelTimer
    + Deprecate ObjectEncoder/ObjectDecoder
    + HPACK dynamic table size update must happen at the beginning
    of the header block
  * Fixes of 4.1.85:
    + A bug in FlowControlHandler that broke auto-read has been
    fixed
    + The HTTP/2 HPACK encoder is now faster at encoding headers
    that have many values
    + A potential memory leak bug has been fixed in the pooled
    allocator
    + Fix an issue with the Blockhound integration, which could
    cause the MacOSDnsServerAddressStreamProvider to be flagged
    as making blocking calls
    + Inconsitencies in how epoll, kqueue, and NIO handle RDHUP have
    been fixed
    + ByteToMessageDecoder now handle situations where the same
    ByteBuf instance is read multiple times
    + The check that ensures the HTTP/1 Content-Length header is
    unique, now no longer causes headers to be rearranged (change
    their order)
    + Fix a NullPointerException bug with class initialisation order
    between InternalLogger and InternalThreadLocalMap
    + When the netty-resolver-dns-native-macos classes can't load
    their native bindings, they now only print a short error
    message instead of the huge stack trace it printed previously.
    The stack trace is still included if DEBUG logging is enabled
    + The Graal native-image meta-data is now placed in the
    recommended location, and no longer causes warnings to be
    printed
    + The HTTP/1 and HTTP/2 codecs now properly support RFC 8297
    Early Hints
    + Subclasses of FastThreadLocalThread can now tell the Netty
    Blockhound integration that they should be allowed to make
    blocking calls
    + Validation of HTTP/2 connection headers have been moved from
    Http2Headers to HpackDecoder, so that outgoing headers are
    not validated
  * Fixes of 4.1.84:
    + HTTP/2 header values with invalid characters are now rejected
    in header validation
    + We now automatically generate conditional meta-data for
    native-image use, making GraalVM support more reliable
    + Fix a scalability issue caused by instanceof and check-cast
    checks that lead to false-sharing on the
    Klass::secondary_super_cache field in the JVM
    (See JDK-8180450)
    + Made the HTTP/2 HPACK static table implementation faster by
    using a perfect hash function
    + Fixed a bug in our PEMParser when PEM files have multiple
    objects, and BouncyCastle is on the classpath
  * Fixes of 4.1.82:
    + Fix a NullPointerException bug when calling forEachByte on
    nested CompositeByteBufs
    + Relax an overly strict HTTP/2 header validation check that was
    rejecting requests from Chrome and Firefox
    + The OpenSSL and BoringSSL implementations now respect the
    jdk.tls.client.protocols and jdk.tls.server.protocols system
    properties, making them react to these in the same way the JDK
    SSL provider does
  * Fixes of 4.1.81:
    + Fix a regression SslContext private key loading
    + Fix a bug in SslContext private key reading fall-back path
    + Fix a buffer leak regression in HttpClientCodec
    + Fix a bug where some HttpMessage implementations, that also
    implement HttpContent, were not handled correctly
    + The MessageFormatter and FormattingTuple classes are now
    usable in the public API
    + Connection related headers in HTTP/2 frames are now rejected,
    in compliance with the specification
  * Fixes of 4.1.80:
    + HttpObjectEncoder scalability issue due to instanceof checks
    + Improve logging when MacOSDnsServerAddressStreamProvider
    cannot be found/loaded
    + Replace stdlib write/read with send/recv
    + Support for pkcs1
    + Add Blockhound exceptions for the PooledByteBufAllocator
    + Fix epoll bug when receiving zero-sized datagrams
    + Avoid including header values in header validation failure
    exceptions
    + Avoid allocating large buffers in JdkZlibEncoder
    + Native Image Support: Set
    IS_EXPLICIT_TRY_REFLECTION_SET_ACCESSIBLE to true by default
    for native images
    + We need to use disconnectx(...) on macOS
    + Replace synchronized with Java Locks on the allocator
    + Don't use static instances of FixedRecvByteBufAllocator
    + Add escaping for stomp headers
  * Fixes of 4.1.79:
    + The PEM certificate parser is no longer susceptible to
    exponential back-off
    + Non-standard extra ampersands in HTTP POST bodies are no
    longer rejected
    + An io.netty.osClassifiers system property has been added to
    avoid reading os-release files
    + Fix a bug in SslHandler so handlerRemoved works properly even
    if handlerAdded throws an exception
    + Use the correct OSGi processor directive on aarch64, making it
    possible to use OSGi on ARM
    + HTTP paths that begin with a double-slash are now parsed the
    same way browsers do
    + The isCompleted flag is now correctly preserved on objects
    from HttpData.retainedDuplicate()
    + The HttpUtil.isOriginForm() and isAsteriskForm() methods now
    correctly conform with RFC 7230
    + Fix an issue that allowed the multicast methods on
    EpollDatagramChannel to be called outside of an event-loop
    thread
    + Support for the LoongArch64 processor architecture has been
    added
  * Fixes of 4.1.78:
    + Fix a bug where an OPT record was added to DNS queries that
    already had such a record
    + Fix a bug that caused an error when files uploaded with HTTP
    POST contained a backslash in their name
    + Fix an issue in the BlockHound integration that could
    occasionally cause NetUtil to be reported as performing
    blocking operations
    + A similar BlockHound issue was fixed for the JdkSslContext
    + Fix a bug that prevented preface or settings frames from
    being flushed, when an HTTP2 connection was established with
    prior-knowledge
    + Fixes a rare NullPointerException that could occur when a
    ReferenceCountedOpenSslEngine threw an OutOfMemoryError from
    its constructor, and was then later finalized
    + The SslHandler now adds the socket file descriptor to the
    BIOs, when the SslEngine supports this (boringssl and
    libressl), which allow tracing and observability tools to
    monitor encryption traffic on a per-connection basis.
    + It is now possible to explicitly step the scheduling clock in
    EmbeddedEventLoop, which is useful for making automated tests
    with deterministic scheduling
  * Fixes of 4.1.77:
    + Local Information Disclosure Vulnerability in Netty on
    Unix-Like systems due temporary files for Java 6 and lower in
    io.netty:netty-codec-http (bsc#1199338, CVE-2022-24823)
    + Upgraded the optional netty-tcnative dependency to version
    2.0.52.Final
    + Fix a bug where Netty fails to load a shaded native library
    + Include classifier in Automatic-Module-Name
    + Check if epoll_pwait2 is implemented
    + Don't call strdup on packagePrefix
    + Enable debugging of asynchronous tasks in Intellij
    + Throwing an exception in case glibc is missing instead of
    segfaulting the JVM
  * Fixes of 4.1.76:
    + Upgraded the optional netty-tcnative dependency to version
    2.0.51.Final
    + Upgraded the optional log4j dependency to version 2.17.2
    + The netty-all module now declare an automatic module name,
    making it useable with Java Modules.
    + It is now possible to configure arbitrary socket options for
    the native epoll and kqueue transports. Refer to your
    operating system documentation for what options are available.
    + It is now possible to explicitly bind channels to either IPv4
    or IPv6.
    + The HTTP/2 header validation that rejects duplicate
    pseudo-headers, which was added in 4.1.75.Final, has been
    changed so it no longer breaks older versions of gRPC.
    " Fix a NullPointerException that was hiding the real cause of
    certain HTTP/2 header decoding errors.
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * no-brotli-zstd.patch
  - &gt; 0004-Disable-Brotli-and-ZStd-compression.patch
  * no-werror.patch
    + rebase
- Removed patches:
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + we have the dependencies, so no need to disable them
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + solve the build breakages differently
- Added patches:
  * 0005-Do-not-use-the-Graal-annotations.patch
  * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + do not use annotations for which we don't have dependencies
  * 0007-Do-not-require-the-tcnative-native-library.patch
    + our tcnative library is installed system-wide</changelog>
</package>
<package pkgid="f2292187c52323e7c5de18f492d890b1d338971759d66daef2db8793866e8c23" name="netty-javadoc" arch="noarch">
  <version epoch="0" ver="4.1.90" rel="150200.4.14.1"/>
  <changelog author="fstrba@suse.com" date="1573646400">- Initial packaging of netty 4.1.13</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Split pom-only artifacts into a subpackage netty-pom in order
  to generate their dependencies correctly</changelog>
  <changelog author="fstrba@suse.com" date="1586433600">- Added patch:
  * netty-CVE-2020-11612.patch
    + bsc#1168932, CVE-2020-11612
    + bsc#1169082, CVE-2020-10707</changelog>
  <changelog author="fstrba@suse.com" date="1613044800">- Added patch:
  * netty-CVE-2021-21290.patch
    + bsc#1182103, CVE-2021-21290</changelog>
  <changelog author="fstrba@suse.com" date="1613044801">- Upgrade to latest upstream version 4.1.59
- Removed patches:
  * netty-CVE-2020-11612.patch
  * netty-CVE-2021-21290.patch
    + fixes integrated in the upstream sources
  * 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
  * 0002-Remove-NPN.patch
  * 0003-Remove-conscrypt-ALPN.patch
  * 0004-Remove-jetty-ALPN.patch
    + replaced by new patches
- Added patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + remove various optional dependencies that we do not need
  * 0006-revert-Fix-native-image-build.patch
    + Revert changes that introduce a new dependency that we
    do not have
  * no-werror.patch
    + Do not treat warnings as errors
- Build -poms and -javadoc as noarch packages, since they do not
  install anything in arch-dependent directories</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to latest upstream version 4.1.60
  * fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request
    Content-Length header field is not validated by
    'Http2MultiplexHandler'
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
    + rediff to changed context
- Added patch:
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + revert optional disabled cache implementation that conflicts
    with our 0004-Remove-optional-dep-tcnative.patch</changelog>
  <changelog author="fstrba@suse.com" date="1639483200">- Upgrade to latest upstream version 4.1.72
  * fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn't allow
    setting size restrictions for decompressed data
  * fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn't
    restrict chunk length any may buffer skippable chunks in an
    unnecessary way
  * fixes: bsc#1193672, CVE-2021-43797: possible HTTP request
    smuggling due to insufficient validation against control
    characters
  * fixes: bsc#1184203, CVE-2021-21409: request smuggling via
    content-length header
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
  * no-werror.patch
    + rediff to changed context
- Added patch:
  * no-brotli-zstd.patch
    + disable Brotli and Zstd compression, since we lack
    the dependencies needed to build them</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Upgrade to latest upstream version 4.1.75
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to upstreeam version 4.1.90
  * Fixes of 4.1.90:
    + Adding header name of the header which failed validation
    + Fix HttpHeaders.names for non-String headers
    + Save expensive volatile operations in the common hot http
    decoder path
    + Avoid slow type checks against promises on outbound buffer's
    progress
    + Implement NonStickyEventExecutorGroup.inEventLoop
    + Native image: add support for unix domain sockets
    + Use MacOS SDK 10.9 to prevent apple notarization failures
    + Increase errno cache and guard against IOOBE
    + Don't reset BCSSLParameters when setting application protocols
    + WebSocketClientProtocolHandler: add option to disable UTF8
    validation
    + Chunked HTTP length decoding should account for
    whitespaces/ctrl chars
    + Handle NullPointerException thrown from
    NetworkInterface.getNetworkInterfaces()
  * Fixes of 4.1.89:
    + Don't fail on HttpObjectDecoder's maxHeaderSize greater then
    (Integer.MAX_VALUE - 2)
    + dyld: Symbol not found: _netty_jni_util_JNI_OnLoad when
    upgrading from 4.1.87.Final to 4.1.88.Final
  * Fixes of 4.1.88:
    + Speed-up HTTP 1.1 header and line parsing
    + Add StacklessSSLHandshakeException for ClosedChannelException
    + Modify changed CloseWebSocketFrame#statusCode() to change the
    fetch code to unsigned
    + Check if CommandLineTools are installed before trying to
    execute install_name_tool
    + Allow to adjust the GlobalEventExecutor quietPeriod via a
    system property
    + Add SslProvider.isOptionSupported(...)
    + Fix FlowControlHandler's behaviour to pass read events when
    auto-reading is turned off
    + Ensure Http2StreamFrameToHttpObjectCodec#decode doesn't add
    transfer-encoding for 204/304 response
    + Only do extra CNAME query if we couldnt follow the whole CNAME
    chain in the response
    + Include query id when a query failed
    + DnsResolveContext: include expected record types in exception
    message
    + Add necessary native-image configuration files for epoll
    + Create a deep-copy of the Throwable before returning it from
    the cache to prevent possible leaks
    + Always respect completeOncePreferredResolved in
    DnsNameResolver
    + fix brotli compression
    + Optionally depend on bctls-jdk15on
    + Make releasing objects back to Recycler faster
    + Correctly keep track of validExtensions per request / response
    + Add handling of inflight lookups to reduce real queries when
    lookup same hostname
    + DnsQueryContext: include query id and question info in
    exception message
    + AsciiStrings can be batch-encoded
  * Fixes of 4.1.87:
    + Upgrade to latest netty-tcnative release which doesnt link
    libcrypt
    + Add recvmmsg &amp; sendmmsg syscall number for loongarch64
    + Return correct value from SSLSession.getPacketSize() when
    using native SSL implementation
    + Explicit disable TLSv1.3 in the OpenSSL options if not
    supported
    + Support handshake timeout in SniHandler.
    + Extend DNS address supplier interface to provide feedback
  * Fixes of 4.1.86:
    + HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360,
    CVE-2022-41881)
    + HTTP Response splitting from assigning header value iterator
    (bsc#1206379, CVE-2022-41915)
    + Revert #12888 for potential task scheduling problems in
    HashedWheelTimer
    + Deprecate ObjectEncoder/ObjectDecoder
    + HPACK dynamic table size update must happen at the beginning
    of the header block
  * Fixes of 4.1.85:
    + A bug in FlowControlHandler that broke auto-read has been
    fixed
    + The HTTP/2 HPACK encoder is now faster at encoding headers
    that have many values
    + A potential memory leak bug has been fixed in the pooled
    allocator
    + Fix an issue with the Blockhound integration, which could
    cause the MacOSDnsServerAddressStreamProvider to be flagged
    as making blocking calls
    + Inconsitencies in how epoll, kqueue, and NIO handle RDHUP have
    been fixed
    + ByteToMessageDecoder now handle situations where the same
    ByteBuf instance is read multiple times
    + The check that ensures the HTTP/1 Content-Length header is
    unique, now no longer causes headers to be rearranged (change
    their order)
    + Fix a NullPointerException bug with class initialisation order
    between InternalLogger and InternalThreadLocalMap
    + When the netty-resolver-dns-native-macos classes can't load
    their native bindings, they now only print a short error
    message instead of the huge stack trace it printed previously.
    The stack trace is still included if DEBUG logging is enabled
    + The Graal native-image meta-data is now placed in the
    recommended location, and no longer causes warnings to be
    printed
    + The HTTP/1 and HTTP/2 codecs now properly support RFC 8297
    Early Hints
    + Subclasses of FastThreadLocalThread can now tell the Netty
    Blockhound integration that they should be allowed to make
    blocking calls
    + Validation of HTTP/2 connection headers have been moved from
    Http2Headers to HpackDecoder, so that outgoing headers are
    not validated
  * Fixes of 4.1.84:
    + HTTP/2 header values with invalid characters are now rejected
    in header validation
    + We now automatically generate conditional meta-data for
    native-image use, making GraalVM support more reliable
    + Fix a scalability issue caused by instanceof and check-cast
    checks that lead to false-sharing on the
    Klass::secondary_super_cache field in the JVM
    (See JDK-8180450)
    + Made the HTTP/2 HPACK static table implementation faster by
    using a perfect hash function
    + Fixed a bug in our PEMParser when PEM files have multiple
    objects, and BouncyCastle is on the classpath
  * Fixes of 4.1.82:
    + Fix a NullPointerException bug when calling forEachByte on
    nested CompositeByteBufs
    + Relax an overly strict HTTP/2 header validation check that was
    rejecting requests from Chrome and Firefox
    + The OpenSSL and BoringSSL implementations now respect the
    jdk.tls.client.protocols and jdk.tls.server.protocols system
    properties, making them react to these in the same way the JDK
    SSL provider does
  * Fixes of 4.1.81:
    + Fix a regression SslContext private key loading
    + Fix a bug in SslContext private key reading fall-back path
    + Fix a buffer leak regression in HttpClientCodec
    + Fix a bug where some HttpMessage implementations, that also
    implement HttpContent, were not handled correctly
    + The MessageFormatter and FormattingTuple classes are now
    usable in the public API
    + Connection related headers in HTTP/2 frames are now rejected,
    in compliance with the specification
  * Fixes of 4.1.80:
    + HttpObjectEncoder scalability issue due to instanceof checks
    + Improve logging when MacOSDnsServerAddressStreamProvider
    cannot be found/loaded
    + Replace stdlib write/read with send/recv
    + Support for pkcs1
    + Add Blockhound exceptions for the PooledByteBufAllocator
    + Fix epoll bug when receiving zero-sized datagrams
    + Avoid including header values in header validation failure
    exceptions
    + Avoid allocating large buffers in JdkZlibEncoder
    + Native Image Support: Set
    IS_EXPLICIT_TRY_REFLECTION_SET_ACCESSIBLE to true by default
    for native images
    + We need to use disconnectx(...) on macOS
    + Replace synchronized with Java Locks on the allocator
    + Don't use static instances of FixedRecvByteBufAllocator
    + Add escaping for stomp headers
  * Fixes of 4.1.79:
    + The PEM certificate parser is no longer susceptible to
    exponential back-off
    + Non-standard extra ampersands in HTTP POST bodies are no
    longer rejected
    + An io.netty.osClassifiers system property has been added to
    avoid reading os-release files
    + Fix a bug in SslHandler so handlerRemoved works properly even
    if handlerAdded throws an exception
    + Use the correct OSGi processor directive on aarch64, making it
    possible to use OSGi on ARM
    + HTTP paths that begin with a double-slash are now parsed the
    same way browsers do
    + The isCompleted flag is now correctly preserved on objects
    from HttpData.retainedDuplicate()
    + The HttpUtil.isOriginForm() and isAsteriskForm() methods now
    correctly conform with RFC 7230
    + Fix an issue that allowed the multicast methods on
    EpollDatagramChannel to be called outside of an event-loop
    thread
    + Support for the LoongArch64 processor architecture has been
    added
  * Fixes of 4.1.78:
    + Fix a bug where an OPT record was added to DNS queries that
    already had such a record
    + Fix a bug that caused an error when files uploaded with HTTP
    POST contained a backslash in their name
    + Fix an issue in the BlockHound integration that could
    occasionally cause NetUtil to be reported as performing
    blocking operations
    + A similar BlockHound issue was fixed for the JdkSslContext
    + Fix a bug that prevented preface or settings frames from
    being flushed, when an HTTP2 connection was established with
    prior-knowledge
    + Fixes a rare NullPointerException that could occur when a
    ReferenceCountedOpenSslEngine threw an OutOfMemoryError from
    its constructor, and was then later finalized
    + The SslHandler now adds the socket file descriptor to the
    BIOs, when the SslEngine supports this (boringssl and
    libressl), which allow tracing and observability tools to
    monitor encryption traffic on a per-connection basis.
    + It is now possible to explicitly step the scheduling clock in
    EmbeddedEventLoop, which is useful for making automated tests
    with deterministic scheduling
  * Fixes of 4.1.77:
    + Local Information Disclosure Vulnerability in Netty on
    Unix-Like systems due temporary files for Java 6 and lower in
    io.netty:netty-codec-http (bsc#1199338, CVE-2022-24823)
    + Upgraded the optional netty-tcnative dependency to version
    2.0.52.Final
    + Fix a bug where Netty fails to load a shaded native library
    + Include classifier in Automatic-Module-Name
    + Check if epoll_pwait2 is implemented
    + Don't call strdup on packagePrefix
    + Enable debugging of asynchronous tasks in Intellij
    + Throwing an exception in case glibc is missing instead of
    segfaulting the JVM
  * Fixes of 4.1.76:
    + Upgraded the optional netty-tcnative dependency to version
    2.0.51.Final
    + Upgraded the optional log4j dependency to version 2.17.2
    + The netty-all module now declare an automatic module name,
    making it useable with Java Modules.
    + It is now possible to configure arbitrary socket options for
    the native epoll and kqueue transports. Refer to your
    operating system documentation for what options are available.
    + It is now possible to explicitly bind channels to either IPv4
    or IPv6.
    + The HTTP/2 header validation that rejects duplicate
    pseudo-headers, which was added in 4.1.75.Final, has been
    changed so it no longer breaks older versions of gRPC.
    " Fix a NullPointerException that was hiding the real cause of
    certain HTTP/2 header decoding errors.
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * no-brotli-zstd.patch
  - &gt; 0004-Disable-Brotli-and-ZStd-compression.patch
  * no-werror.patch
    + rebase
- Removed patches:
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + we have the dependencies, so no need to disable them
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + solve the build breakages differently
- Added patches:
  * 0005-Do-not-use-the-Graal-annotations.patch
  * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + do not use annotations for which we don't have dependencies
  * 0007-Do-not-require-the-tcnative-native-library.patch
    + our tcnative library is installed system-wide</changelog>
</package>
<package pkgid="5de3cce114a28880024f21f4ffdf62087ccf36d2496cf3fe9d212468243a9c31" name="netty-poms" arch="noarch">
  <version epoch="0" ver="4.1.90" rel="150200.4.14.1"/>
  <changelog author="fstrba@suse.com" date="1573646400">- Initial packaging of netty 4.1.13</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Split pom-only artifacts into a subpackage netty-pom in order
  to generate their dependencies correctly</changelog>
  <changelog author="fstrba@suse.com" date="1586433600">- Added patch:
  * netty-CVE-2020-11612.patch
    + bsc#1168932, CVE-2020-11612
    + bsc#1169082, CVE-2020-10707</changelog>
  <changelog author="fstrba@suse.com" date="1613044800">- Added patch:
  * netty-CVE-2021-21290.patch
    + bsc#1182103, CVE-2021-21290</changelog>
  <changelog author="fstrba@suse.com" date="1613044801">- Upgrade to latest upstream version 4.1.59
- Removed patches:
  * netty-CVE-2020-11612.patch
  * netty-CVE-2021-21290.patch
    + fixes integrated in the upstream sources
  * 0001-Remove-OpenSSL-parts-depending-on-tcnative.patch
  * 0002-Remove-NPN.patch
  * 0003-Remove-conscrypt-ALPN.patch
  * 0004-Remove-jetty-ALPN.patch
    + replaced by new patches
- Added patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + remove various optional dependencies that we do not need
  * 0006-revert-Fix-native-image-build.patch
    + Revert changes that introduce a new dependency that we
    do not have
  * no-werror.patch
    + Do not treat warnings as errors
- Build -poms and -javadoc as noarch packages, since they do not
  install anything in arch-dependent directories</changelog>
  <changelog author="fstrba@suse.com" date="1615550400">- Upgrade to latest upstream version 4.1.60
  * fixes: bsc#1183262, CVE-2021-21295: HTTP/2 request
    Content-Length header field is not validated by
    'Http2MultiplexHandler'
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
    + rediff to changed context
- Added patch:
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + revert optional disabled cache implementation that conflicts
    with our 0004-Remove-optional-dep-tcnative.patch</changelog>
  <changelog author="fstrba@suse.com" date="1639483200">- Upgrade to latest upstream version 4.1.72
  * fixes: bsc#1190610, CVE-2021-37136: Bzip2Decoder doesn't allow
    setting size restrictions for decompressed data
  * fixes: bsc#1190613, CVE-2021-37137: SnappyFrameDecoder doesn't
    restrict chunk length any may buffer skippable chunks in an
    unnecessary way
  * fixes: bsc#1193672, CVE-2021-43797: possible HTTP request
    smuggling due to insufficient validation against control
    characters
  * fixes: bsc#1184203, CVE-2021-21409: request smuggling via
    content-length header
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
  * no-werror.patch
    + rediff to changed context
- Added patch:
  * no-brotli-zstd.patch
    + disable Brotli and Zstd compression, since we lack
    the dependencies needed to build them</changelog>
  <changelog author="fstrba@suse.com" date="1645531200">- Do not build against the log4j12 packages</changelog>
  <changelog author="fstrba@suse.com" date="1649419200">- Upgrade to latest upstream version 4.1.75
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + rebase</changelog>
  <changelog author="fstrba@suse.com" date="1665662400">- Force building with java 11 on ix86 in order to avoid random
  build failures</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to upstreeam version 4.1.90
  * Fixes of 4.1.90:
    + Adding header name of the header which failed validation
    + Fix HttpHeaders.names for non-String headers
    + Save expensive volatile operations in the common hot http
    decoder path
    + Avoid slow type checks against promises on outbound buffer's
    progress
    + Implement NonStickyEventExecutorGroup.inEventLoop
    + Native image: add support for unix domain sockets
    + Use MacOS SDK 10.9 to prevent apple notarization failures
    + Increase errno cache and guard against IOOBE
    + Don't reset BCSSLParameters when setting application protocols
    + WebSocketClientProtocolHandler: add option to disable UTF8
    validation
    + Chunked HTTP length decoding should account for
    whitespaces/ctrl chars
    + Handle NullPointerException thrown from
    NetworkInterface.getNetworkInterfaces()
  * Fixes of 4.1.89:
    + Don't fail on HttpObjectDecoder's maxHeaderSize greater then
    (Integer.MAX_VALUE - 2)
    + dyld: Symbol not found: _netty_jni_util_JNI_OnLoad when
    upgrading from 4.1.87.Final to 4.1.88.Final
  * Fixes of 4.1.88:
    + Speed-up HTTP 1.1 header and line parsing
    + Add StacklessSSLHandshakeException for ClosedChannelException
    + Modify changed CloseWebSocketFrame#statusCode() to change the
    fetch code to unsigned
    + Check if CommandLineTools are installed before trying to
    execute install_name_tool
    + Allow to adjust the GlobalEventExecutor quietPeriod via a
    system property
    + Add SslProvider.isOptionSupported(...)
    + Fix FlowControlHandler's behaviour to pass read events when
    auto-reading is turned off
    + Ensure Http2StreamFrameToHttpObjectCodec#decode doesn't add
    transfer-encoding for 204/304 response
    + Only do extra CNAME query if we couldnt follow the whole CNAME
    chain in the response
    + Include query id when a query failed
    + DnsResolveContext: include expected record types in exception
    message
    + Add necessary native-image configuration files for epoll
    + Create a deep-copy of the Throwable before returning it from
    the cache to prevent possible leaks
    + Always respect completeOncePreferredResolved in
    DnsNameResolver
    + fix brotli compression
    + Optionally depend on bctls-jdk15on
    + Make releasing objects back to Recycler faster
    + Correctly keep track of validExtensions per request / response
    + Add handling of inflight lookups to reduce real queries when
    lookup same hostname
    + DnsQueryContext: include query id and question info in
    exception message
    + AsciiStrings can be batch-encoded
  * Fixes of 4.1.87:
    + Upgrade to latest netty-tcnative release which doesnt link
    libcrypt
    + Add recvmmsg &amp; sendmmsg syscall number for loongarch64
    + Return correct value from SSLSession.getPacketSize() when
    using native SSL implementation
    + Explicit disable TLSv1.3 in the OpenSSL options if not
    supported
    + Support handshake timeout in SniHandler.
    + Extend DNS address supplier interface to provide feedback
  * Fixes of 4.1.86:
    + HAProxyMessageDecoder Stack Exhaustion DoS (bsc#1206360,
    CVE-2022-41881)
    + HTTP Response splitting from assigning header value iterator
    (bsc#1206379, CVE-2022-41915)
    + Revert #12888 for potential task scheduling problems in
    HashedWheelTimer
    + Deprecate ObjectEncoder/ObjectDecoder
    + HPACK dynamic table size update must happen at the beginning
    of the header block
  * Fixes of 4.1.85:
    + A bug in FlowControlHandler that broke auto-read has been
    fixed
    + The HTTP/2 HPACK encoder is now faster at encoding headers
    that have many values
    + A potential memory leak bug has been fixed in the pooled
    allocator
    + Fix an issue with the Blockhound integration, which could
    cause the MacOSDnsServerAddressStreamProvider to be flagged
    as making blocking calls
    + Inconsitencies in how epoll, kqueue, and NIO handle RDHUP have
    been fixed
    + ByteToMessageDecoder now handle situations where the same
    ByteBuf instance is read multiple times
    + The check that ensures the HTTP/1 Content-Length header is
    unique, now no longer causes headers to be rearranged (change
    their order)
    + Fix a NullPointerException bug with class initialisation order
    between InternalLogger and InternalThreadLocalMap
    + When the netty-resolver-dns-native-macos classes can't load
    their native bindings, they now only print a short error
    message instead of the huge stack trace it printed previously.
    The stack trace is still included if DEBUG logging is enabled
    + The Graal native-image meta-data is now placed in the
    recommended location, and no longer causes warnings to be
    printed
    + The HTTP/1 and HTTP/2 codecs now properly support RFC 8297
    Early Hints
    + Subclasses of FastThreadLocalThread can now tell the Netty
    Blockhound integration that they should be allowed to make
    blocking calls
    + Validation of HTTP/2 connection headers have been moved from
    Http2Headers to HpackDecoder, so that outgoing headers are
    not validated
  * Fixes of 4.1.84:
    + HTTP/2 header values with invalid characters are now rejected
    in header validation
    + We now automatically generate conditional meta-data for
    native-image use, making GraalVM support more reliable
    + Fix a scalability issue caused by instanceof and check-cast
    checks that lead to false-sharing on the
    Klass::secondary_super_cache field in the JVM
    (See JDK-8180450)
    + Made the HTTP/2 HPACK static table implementation faster by
    using a perfect hash function
    + Fixed a bug in our PEMParser when PEM files have multiple
    objects, and BouncyCastle is on the classpath
  * Fixes of 4.1.82:
    + Fix a NullPointerException bug when calling forEachByte on
    nested CompositeByteBufs
    + Relax an overly strict HTTP/2 header validation check that was
    rejecting requests from Chrome and Firefox
    + The OpenSSL and BoringSSL implementations now respect the
    jdk.tls.client.protocols and jdk.tls.server.protocols system
    properties, making them react to these in the same way the JDK
    SSL provider does
  * Fixes of 4.1.81:
    + Fix a regression SslContext private key loading
    + Fix a bug in SslContext private key reading fall-back path
    + Fix a buffer leak regression in HttpClientCodec
    + Fix a bug where some HttpMessage implementations, that also
    implement HttpContent, were not handled correctly
    + The MessageFormatter and FormattingTuple classes are now
    usable in the public API
    + Connection related headers in HTTP/2 frames are now rejected,
    in compliance with the specification
  * Fixes of 4.1.80:
    + HttpObjectEncoder scalability issue due to instanceof checks
    + Improve logging when MacOSDnsServerAddressStreamProvider
    cannot be found/loaded
    + Replace stdlib write/read with send/recv
    + Support for pkcs1
    + Add Blockhound exceptions for the PooledByteBufAllocator
    + Fix epoll bug when receiving zero-sized datagrams
    + Avoid including header values in header validation failure
    exceptions
    + Avoid allocating large buffers in JdkZlibEncoder
    + Native Image Support: Set
    IS_EXPLICIT_TRY_REFLECTION_SET_ACCESSIBLE to true by default
    for native images
    + We need to use disconnectx(...) on macOS
    + Replace synchronized with Java Locks on the allocator
    + Don't use static instances of FixedRecvByteBufAllocator
    + Add escaping for stomp headers
  * Fixes of 4.1.79:
    + The PEM certificate parser is no longer susceptible to
    exponential back-off
    + Non-standard extra ampersands in HTTP POST bodies are no
    longer rejected
    + An io.netty.osClassifiers system property has been added to
    avoid reading os-release files
    + Fix a bug in SslHandler so handlerRemoved works properly even
    if handlerAdded throws an exception
    + Use the correct OSGi processor directive on aarch64, making it
    possible to use OSGi on ARM
    + HTTP paths that begin with a double-slash are now parsed the
    same way browsers do
    + The isCompleted flag is now correctly preserved on objects
    from HttpData.retainedDuplicate()
    + The HttpUtil.isOriginForm() and isAsteriskForm() methods now
    correctly conform with RFC 7230
    + Fix an issue that allowed the multicast methods on
    EpollDatagramChannel to be called outside of an event-loop
    thread
    + Support for the LoongArch64 processor architecture has been
    added
  * Fixes of 4.1.78:
    + Fix a bug where an OPT record was added to DNS queries that
    already had such a record
    + Fix a bug that caused an error when files uploaded with HTTP
    POST contained a backslash in their name
    + Fix an issue in the BlockHound integration that could
    occasionally cause NetUtil to be reported as performing
    blocking operations
    + A similar BlockHound issue was fixed for the JdkSslContext
    + Fix a bug that prevented preface or settings frames from
    being flushed, when an HTTP2 connection was established with
    prior-knowledge
    + Fixes a rare NullPointerException that could occur when a
    ReferenceCountedOpenSslEngine threw an OutOfMemoryError from
    its constructor, and was then later finalized
    + The SslHandler now adds the socket file descriptor to the
    BIOs, when the SslEngine supports this (boringssl and
    libressl), which allow tracing and observability tools to
    monitor encryption traffic on a per-connection basis.
    + It is now possible to explicitly step the scheduling clock in
    EmbeddedEventLoop, which is useful for making automated tests
    with deterministic scheduling
  * Fixes of 4.1.77:
    + Local Information Disclosure Vulnerability in Netty on
    Unix-Like systems due temporary files for Java 6 and lower in
    io.netty:netty-codec-http (bsc#1199338, CVE-2022-24823)
    + Upgraded the optional netty-tcnative dependency to version
    2.0.52.Final
    + Fix a bug where Netty fails to load a shaded native library
    + Include classifier in Automatic-Module-Name
    + Check if epoll_pwait2 is implemented
    + Don't call strdup on packagePrefix
    + Enable debugging of asynchronous tasks in Intellij
    + Throwing an exception in case glibc is missing instead of
    segfaulting the JVM
  * Fixes of 4.1.76:
    + Upgraded the optional netty-tcnative dependency to version
    2.0.51.Final
    + Upgraded the optional log4j dependency to version 2.17.2
    + The netty-all module now declare an automatic module name,
    making it useable with Java Modules.
    + It is now possible to configure arbitrary socket options for
    the native epoll and kqueue transports. Refer to your
    operating system documentation for what options are available.
    + It is now possible to explicitly bind channels to either IPv4
    or IPv6.
    + The HTTP/2 header validation that rejects duplicate
    pseudo-headers, which was added in 4.1.75.Final, has been
    changed so it no longer breaks older versions of gRPC.
    " Fix a NullPointerException that was hiding the real cause of
    certain HTTP/2 header decoding errors.
- Modified patches:
  * 0001-Remove-optional-dep-Blockhound.patch
  * 0002-Remove-optional-dep-conscrypt.patch
  * 0003-Remove-optional-deps-jetty-alpn-and-npn.patch
  * no-brotli-zstd.patch
  - &gt; 0004-Disable-Brotli-and-ZStd-compression.patch
  * no-werror.patch
    + rebase
- Removed patches:
  * 0004-Remove-optional-dep-tcnative.patch
  * 0005-Remove-optional-dep-log4j.patch
    + we have the dependencies, so no need to disable them
  * 0006-revert-Fix-native-image-build.patch
  * 0007-Revert-Support-session-cache-for-client-and-server-w.patch
    + solve the build breakages differently
- Added patches:
  * 0005-Do-not-use-the-Graal-annotations.patch
  * 0006-Do-not-use-the-Jetbrains-annotations.patch
    + do not use annotations for which we don't have dependencies
  * 0007-Do-not-require-the-tcnative-native-library.patch
    + our tcnative library is installed system-wide</changelog>
</package>
<package pkgid="ba499a17f1a1e3060013afcd031d04e7317bb843ca72a081d8bd09bd011c338e" name="netty-tcnative" arch="aarch64">
  <version epoch="0" ver="2.0.59" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of netty-tcnative 1.1.30</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Update to the 1.1.33 Final26, the last version of 1.1 series
- Use directement libtcnative-1-0 package, since it is API
  compatible and supports openssl 1.1.x
- Removed patch:
  * i388aprFix.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Update to the 2.0.36 Final
  * Includes many changes, from which the relevant ones are:
    + Upgrade to OpenSSL 1.1.1i
    + Update to latest openssl version for static build
    + Update to LibreSSL 3.1.4
    + Update to latest stable libressl release
    + Update to openssl 1.1.1g
    + OpenSSL 1.1.1d
    + Update to libressl 2.9.3
    + Upgrade to openssl 1.1.1c
    + Update OpenSSL to 1.1.1b and LibreSSL to 2.8.3
    + Cleanup BoringSSL TLSv1.3 support and consistent handle empty ciphers.
    + Support TLSv1.3 with compiling against boringssl
    + Return 0 for SSL_OP_NO_TLSv1_3 when TLSv1.3 is not supported.
    + Add support for TLSv1.3 when compiled against openssl 1.1.1
    + Allow to load a private key from the OpenSSL engine.
    + Support KeyManagerFactory if compiled against OpenSSL &lt; 1.0.2 but using OpenSSL &gt;= 1.0.2 at runtime.
    + Update to libressl 2.6.4
    + Update to openssl 1.0.2n
    + Update to libressl 2.5.5
    + Allow to compile with openssl 1.0.1
    + Update deprecated methods and OpenSSL api changes to allow building with OpenSSL 1.1.0e
    + Update to libressl 2.4.5
    + Update openssl to 1.0.2k
    + Ensure we can compile against openssl 1.1.x and libressl 2.5.x as well.
    + Update libressl to 2.4.2
    + Update openssl to 1.0.2j
    + Update openssl to 1.0.2i
  * fix build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1650888000">- Remove dependency on separate package netty-jni-util-sources
- Unpack the sources to their right place without passing through
  maven mechanisms
- This version fixes bsc#1198792</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to version 2.0.59 Final
  * new artifact name netty-tcnative-classes, provided by this
    version is required by netty 4.1.90 which contains important
    security updates
  * No formal changelog present. This artifact is closely bound
    to the netty releases</changelog>
</package>
<package pkgid="9317420189f6a7d1483dc71454756681b21561660ed26a2b69b0b5a98fb40c99" name="netty-tcnative" arch="ppc64le">
  <version epoch="0" ver="2.0.59" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of netty-tcnative 1.1.30</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Update to the 1.1.33 Final26, the last version of 1.1 series
- Use directement libtcnative-1-0 package, since it is API
  compatible and supports openssl 1.1.x
- Removed patch:
  * i388aprFix.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Update to the 2.0.36 Final
  * Includes many changes, from which the relevant ones are:
    + Upgrade to OpenSSL 1.1.1i
    + Update to latest openssl version for static build
    + Update to LibreSSL 3.1.4
    + Update to latest stable libressl release
    + Update to openssl 1.1.1g
    + OpenSSL 1.1.1d
    + Update to libressl 2.9.3
    + Upgrade to openssl 1.1.1c
    + Update OpenSSL to 1.1.1b and LibreSSL to 2.8.3
    + Cleanup BoringSSL TLSv1.3 support and consistent handle empty ciphers.
    + Support TLSv1.3 with compiling against boringssl
    + Return 0 for SSL_OP_NO_TLSv1_3 when TLSv1.3 is not supported.
    + Add support for TLSv1.3 when compiled against openssl 1.1.1
    + Allow to load a private key from the OpenSSL engine.
    + Support KeyManagerFactory if compiled against OpenSSL &lt; 1.0.2 but using OpenSSL &gt;= 1.0.2 at runtime.
    + Update to libressl 2.6.4
    + Update to openssl 1.0.2n
    + Update to libressl 2.5.5
    + Allow to compile with openssl 1.0.1
    + Update deprecated methods and OpenSSL api changes to allow building with OpenSSL 1.1.0e
    + Update to libressl 2.4.5
    + Update openssl to 1.0.2k
    + Ensure we can compile against openssl 1.1.x and libressl 2.5.x as well.
    + Update libressl to 2.4.2
    + Update openssl to 1.0.2j
    + Update openssl to 1.0.2i
  * fix build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1650888000">- Remove dependency on separate package netty-jni-util-sources
- Unpack the sources to their right place without passing through
  maven mechanisms
- This version fixes bsc#1198792</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to version 2.0.59 Final
  * new artifact name netty-tcnative-classes, provided by this
    version is required by netty 4.1.90 which contains important
    security updates
  * No formal changelog present. This artifact is closely bound
    to the netty releases</changelog>
</package>
<package pkgid="03129d72b832e395b6ead5f5b42ac68a0075b3afa9a791b03895c2bdc02b82d5" name="netty-tcnative" arch="s390x">
  <version epoch="0" ver="2.0.59" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of netty-tcnative 1.1.30</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Update to the 1.1.33 Final26, the last version of 1.1 series
- Use directement libtcnative-1-0 package, since it is API
  compatible and supports openssl 1.1.x
- Removed patch:
  * i388aprFix.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Update to the 2.0.36 Final
  * Includes many changes, from which the relevant ones are:
    + Upgrade to OpenSSL 1.1.1i
    + Update to latest openssl version for static build
    + Update to LibreSSL 3.1.4
    + Update to latest stable libressl release
    + Update to openssl 1.1.1g
    + OpenSSL 1.1.1d
    + Update to libressl 2.9.3
    + Upgrade to openssl 1.1.1c
    + Update OpenSSL to 1.1.1b and LibreSSL to 2.8.3
    + Cleanup BoringSSL TLSv1.3 support and consistent handle empty ciphers.
    + Support TLSv1.3 with compiling against boringssl
    + Return 0 for SSL_OP_NO_TLSv1_3 when TLSv1.3 is not supported.
    + Add support for TLSv1.3 when compiled against openssl 1.1.1
    + Allow to load a private key from the OpenSSL engine.
    + Support KeyManagerFactory if compiled against OpenSSL &lt; 1.0.2 but using OpenSSL &gt;= 1.0.2 at runtime.
    + Update to libressl 2.6.4
    + Update to openssl 1.0.2n
    + Update to libressl 2.5.5
    + Allow to compile with openssl 1.0.1
    + Update deprecated methods and OpenSSL api changes to allow building with OpenSSL 1.1.0e
    + Update to libressl 2.4.5
    + Update openssl to 1.0.2k
    + Ensure we can compile against openssl 1.1.x and libressl 2.5.x as well.
    + Update libressl to 2.4.2
    + Update openssl to 1.0.2j
    + Update openssl to 1.0.2i
  * fix build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1650888000">- Remove dependency on separate package netty-jni-util-sources
- Unpack the sources to their right place without passing through
  maven mechanisms
- This version fixes bsc#1198792</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to version 2.0.59 Final
  * new artifact name netty-tcnative-classes, provided by this
    version is required by netty 4.1.90 which contains important
    security updates
  * No formal changelog present. This artifact is closely bound
    to the netty releases</changelog>
</package>
<package pkgid="384e5f0c75ffe5b7c9dda65350ac633db3d537cc6f3a47e8767d009660c5ea5f" name="netty-tcnative" arch="src">
  <version epoch="0" ver="2.0.59" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of netty-tcnative 1.1.30</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Update to the 1.1.33 Final26, the last version of 1.1 series
- Use directement libtcnative-1-0 package, since it is API
  compatible and supports openssl 1.1.x
- Removed patch:
  * i388aprFix.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Update to the 2.0.36 Final
  * Includes many changes, from which the relevant ones are:
    + Upgrade to OpenSSL 1.1.1i
    + Update to latest openssl version for static build
    + Update to LibreSSL 3.1.4
    + Update to latest stable libressl release
    + Update to openssl 1.1.1g
    + OpenSSL 1.1.1d
    + Update to libressl 2.9.3
    + Upgrade to openssl 1.1.1c
    + Update OpenSSL to 1.1.1b and LibreSSL to 2.8.3
    + Cleanup BoringSSL TLSv1.3 support and consistent handle empty ciphers.
    + Support TLSv1.3 with compiling against boringssl
    + Return 0 for SSL_OP_NO_TLSv1_3 when TLSv1.3 is not supported.
    + Add support for TLSv1.3 when compiled against openssl 1.1.1
    + Allow to load a private key from the OpenSSL engine.
    + Support KeyManagerFactory if compiled against OpenSSL &lt; 1.0.2 but using OpenSSL &gt;= 1.0.2 at runtime.
    + Update to libressl 2.6.4
    + Update to openssl 1.0.2n
    + Update to libressl 2.5.5
    + Allow to compile with openssl 1.0.1
    + Update deprecated methods and OpenSSL api changes to allow building with OpenSSL 1.1.0e
    + Update to libressl 2.4.5
    + Update openssl to 1.0.2k
    + Ensure we can compile against openssl 1.1.x and libressl 2.5.x as well.
    + Update libressl to 2.4.2
    + Update openssl to 1.0.2j
    + Update openssl to 1.0.2i
  * fix build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1650888000">- Remove dependency on separate package netty-jni-util-sources
- Unpack the sources to their right place without passing through
  maven mechanisms
- This version fixes bsc#1198792</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to version 2.0.59 Final
  * new artifact name netty-tcnative-classes, provided by this
    version is required by netty 4.1.90 which contains important
    security updates
  * No formal changelog present. This artifact is closely bound
    to the netty releases</changelog>
</package>
<package pkgid="28afe5b0abbb4eb9400787cff509cf49487f480ed8e5b775276f82f0761582b5" name="netty-tcnative" arch="x86_64">
  <version epoch="0" ver="2.0.59" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of netty-tcnative 1.1.30</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Update to the 1.1.33 Final26, the last version of 1.1 series
- Use directement libtcnative-1-0 package, since it is API
  compatible and supports openssl 1.1.x
- Removed patch:
  * i388aprFix.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Update to the 2.0.36 Final
  * Includes many changes, from which the relevant ones are:
    + Upgrade to OpenSSL 1.1.1i
    + Update to latest openssl version for static build
    + Update to LibreSSL 3.1.4
    + Update to latest stable libressl release
    + Update to openssl 1.1.1g
    + OpenSSL 1.1.1d
    + Update to libressl 2.9.3
    + Upgrade to openssl 1.1.1c
    + Update OpenSSL to 1.1.1b and LibreSSL to 2.8.3
    + Cleanup BoringSSL TLSv1.3 support and consistent handle empty ciphers.
    + Support TLSv1.3 with compiling against boringssl
    + Return 0 for SSL_OP_NO_TLSv1_3 when TLSv1.3 is not supported.
    + Add support for TLSv1.3 when compiled against openssl 1.1.1
    + Allow to load a private key from the OpenSSL engine.
    + Support KeyManagerFactory if compiled against OpenSSL &lt; 1.0.2 but using OpenSSL &gt;= 1.0.2 at runtime.
    + Update to libressl 2.6.4
    + Update to openssl 1.0.2n
    + Update to libressl 2.5.5
    + Allow to compile with openssl 1.0.1
    + Update deprecated methods and OpenSSL api changes to allow building with OpenSSL 1.1.0e
    + Update to libressl 2.4.5
    + Update openssl to 1.0.2k
    + Ensure we can compile against openssl 1.1.x and libressl 2.5.x as well.
    + Update libressl to 2.4.2
    + Update openssl to 1.0.2j
    + Update openssl to 1.0.2i
  * fix build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1650888000">- Remove dependency on separate package netty-jni-util-sources
- Unpack the sources to their right place without passing through
  maven mechanisms
- This version fixes bsc#1198792</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to version 2.0.59 Final
  * new artifact name netty-tcnative-classes, provided by this
    version is required by netty 4.1.90 which contains important
    security updates
  * No formal changelog present. This artifact is closely bound
    to the netty releases</changelog>
</package>
<package pkgid="1acd56d5a14d549aee31df3aaeb72b62c4e7b76826fb3ea3a9065cec7e7a6baf" name="netty-tcnative-javadoc" arch="noarch">
  <version epoch="0" ver="2.0.59" rel="150200.3.10.1"/>
  <changelog author="fstrba@suse.com" date="1573732800">- Initial packaging of netty-tcnative 1.1.30</changelog>
  <changelog author="fstrba@suse.com" date="1578571200">- Update to the 1.1.33 Final26, the last version of 1.1 series
- Use directement libtcnative-1-0 package, since it is API
  compatible and supports openssl 1.1.x
- Removed patch:
  * i388aprFix.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1616587200">- Update to the 2.0.36 Final
  * Includes many changes, from which the relevant ones are:
    + Upgrade to OpenSSL 1.1.1i
    + Update to latest openssl version for static build
    + Update to LibreSSL 3.1.4
    + Update to latest stable libressl release
    + Update to openssl 1.1.1g
    + OpenSSL 1.1.1d
    + Update to libressl 2.9.3
    + Upgrade to openssl 1.1.1c
    + Update OpenSSL to 1.1.1b and LibreSSL to 2.8.3
    + Cleanup BoringSSL TLSv1.3 support and consistent handle empty ciphers.
    + Support TLSv1.3 with compiling against boringssl
    + Return 0 for SSL_OP_NO_TLSv1_3 when TLSv1.3 is not supported.
    + Add support for TLSv1.3 when compiled against openssl 1.1.1
    + Allow to load a private key from the OpenSSL engine.
    + Support KeyManagerFactory if compiled against OpenSSL &lt; 1.0.2 but using OpenSSL &gt;= 1.0.2 at runtime.
    + Update to libressl 2.6.4
    + Update to openssl 1.0.2n
    + Update to libressl 2.5.5
    + Allow to compile with openssl 1.0.1
    + Update deprecated methods and OpenSSL api changes to allow building with OpenSSL 1.1.0e
    + Update to libressl 2.4.5
    + Update openssl to 1.0.2k
    + Ensure we can compile against openssl 1.1.x and libressl 2.5.x as well.
    + Update libressl to 2.4.2
    + Update openssl to 1.0.2j
    + Update openssl to 1.0.2i
  * fix build in factory</changelog>
  <changelog author="fstrba@suse.com" date="1648036800">- Build with java source and target levels 1.8</changelog>
  <changelog author="fstrba@suse.com" date="1650888000">- Remove dependency on separate package netty-jni-util-sources
- Unpack the sources to their right place without passing through
  maven mechanisms
- This version fixes bsc#1198792</changelog>
  <changelog author="fstrba@suse.com" date="1680177600">- Upgrade to version 2.0.59 Final
  * new artifact name netty-tcnative-classes, provided by this
    version is required by netty 4.1.90 which contains important
    security updates
  * No formal changelog present. This artifact is closely bound
    to the netty releases</changelog>
</package>
<package pkgid="be609c70fb74fe84941d7091f7f39e21683d6b395821f99d889f8f4a874ff806" name="nodejs18" arch="aarch64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="f1350faea2f262c04e00af57341f4c54153e7f75f3523e17d394dbf619b699eb" name="nodejs18" arch="s390x">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="b35129a666d4151ceeb4a322027c6b9e0b8b1df26cfb12044ee2fb3a710817f8" name="nodejs18" arch="src">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="b48aca9542e55bc3bd3f7dd60bc67ab0c208b6004e564e4a22472be16f17a3f3" name="nodejs18" arch="x86_64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="f73a4744774467e8304958258d961ff6c97dbdcf975faf6e0ddd1a45704cef99" name="nodejs18" arch="aarch64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="535283ec13e0dd78dbdf6468bffb4551ad36eb50db1f8c9b111a3749d670504e" name="nodejs18" arch="ppc64le">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="162258e012bb810c045cdb041150712e06ce656ddb20aa8b402443990af38ac7" name="nodejs18" arch="s390x">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="47b58c23b158f28fba88e20300a0079e5424080f46a0f25d3523ad4b10891fdf" name="nodejs18" arch="src">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="a6a3f2f3b05e44ee88bba30d8900fd798459070b40641c69f77a1c74c86b5749" name="nodejs18" arch="x86_64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="faaf8390ab860fe8de7b1a4efe65bd2af5fe5ef95043ae4aba8816ebf1f964c9" name="nodejs18-devel" arch="aarch64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="0ecab1677cd0f2ad74e340a46dfec70b3c19cb1fa25e61500d3da4c17c2fdc29" name="nodejs18-devel" arch="s390x">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="a5bb8c699f70f033efd638a779a820da5ba0bdf83dfcb418194e487ff6dd2563" name="nodejs18-devel" arch="x86_64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="becb473fe378d18882fb549cd57468f77339213aeeeeb1a1545e81f0b77a9303" name="nodejs18-devel" arch="aarch64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="fe4fb26eb6dec6d8fd41003e52c49f248ddcdff5f73fcf87e55afd0767973e47" name="nodejs18-devel" arch="ppc64le">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="0068b3e63c9e5f09edb214af7f7c4f80c0df23ccfc34430a6f943f1cb158e28d" name="nodejs18-devel" arch="s390x">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="e4eeef6b0f02e9d1e207cb9393581f9d5fb38d6b584ac0dcd8822fcda8d6e3c9" name="nodejs18-devel" arch="x86_64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="e8e0d44dd5f86689f25dbef3d2b709e70c9b0b6301a53d3f8916809b8d731bb2" name="nodejs18-docs" arch="noarch">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="a782f66ec7ed9c0a9f28a8f97591821f1dec576a5b12576014b48cfc6d09d7a2" name="nodejs18-docs" arch="noarch">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="de2f8af56b2868d3f8034ebaf76426a4ece651b5bc2a5f3650d42db979d98a39" name="npm18" arch="aarch64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="dd9743241c7e7fd2c57a106d0dfd37566baf4ceac7335830a41ac292e354e378" name="npm18" arch="s390x">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="7c33fb41cc8100a5751275958a8704a657352487ade185d40eaef18702754b01" name="npm18" arch="x86_64">
  <version epoch="0" ver="18.13.0" rel="150400.9.3.1"/>
  <changelog author="adam.majer@suse.de" date="1656417600">- Update to Nodejs 18.4.0. For detailed changes see,
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.4.0
- refreshed: versioned.patch, linker_lto_jobs.patch, nodejs-libpath.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1657540800">- Update to Nodejs 18.5.0:
  * http: stricter Transfer-Encoding and header separator parsing
    (bsc#1201325, bsc#1201326, bsc#1201327,
    CVE-2022-32213, CVE-2022-32214, CVE-2022-32215)
  * src: fix IPv4 validation in inspector_socket
    (bsc#1201328, CVE-2022-32212)
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.5.0</changelog>
  <changelog author="adam.majer@suse.de" date="1658664000">- Update to Nodejs 18.6.0:
  * Experimental ESM Loader Hooks API. For details see,
    https://nodejs.org/api/esm.html
  * dns: export error code constants from dns/promises
  * esm: add chaining to loaders
  * http: add diagnostics channel for http client
  * http: add perf_hooks detail for http request and client
  * module: add isBuiltIn method
  * net: add drop event for net server
  * test_runner: expose describe and it
  * v8: add v8.startupSnapshot utils
  For details, see
  https://github.com/nodejs/node/blob/main/doc/changelogs/CHANGELOG_V18.md#18.6.0</changelog>
  <changelog author="adam.majer@suse.de" date="1659268800">- dns.patch: fix regression
  https://github.com/nodejs/node/issues/44003</changelog>
  <changelog author="adam.majer@suse.de" date="1660824000">- Update to Nodejs 18.7.0:
  * events: add CustomEvent
  * http: add drop request event for http server
  * lib: improved diagnostics_channel subscribe/unsubscribe
  * util: add tokens to parseArgs
- enable crypto policy ciphers for TW and SLE15 SP4+ (bsc#1200303)</changelog>
  <changelog author="adam.majer@suse.de" date="1663243200">- Update to Nodejs 18.9.0:
  * lib - add diagnostics channel for process and worker
  * os - add machine method
  * report - expose report public native apis
  * src - expose environment RequestInterrupt api
  * vm - include vm context in the embedded snapshot
- Changes in 18.8.0:
  * bootstrap: implement run-time user-land snapshots via
  - -build-snapshot and --snapshot-blob. See
  * crypto:
    + allow zero-length IKM in HKDF and in webcrypto PBKDF2
    + allow zero-length secret KeyObject
  * deps: upgrade npm to 8.18.0
  * http: make idle http parser count configurable
  * net: add local family
  * src: print source map error source on demand
  * tls: pass a valid socket on tlsClientError
- dns.patch: upstreamed, removed
- nodejs-libpath.patch, versioned.patch: refreshed
- fix_ci_tests.patch: partially upstreamed
- openssl3_fixups.patch: fix unit tests with openssl 1.1.1
- new_python3.patch: enable python 3.11 as valid interpreter</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663416000">- Skip test-fs-utimes-y2K38.js on armv6hl as well as armv7hl.</changelog>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
</package>
<package pkgid="33cd58ce288a6870ca517e201cad2681338f06954cef3f73cd4794ad7f3a1eb8" name="npm18" arch="aarch64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="97a63fa9779a7a8b6e819f60bb960c8a69bb5b7fda621d29590a534aed13ba4a" name="npm18" arch="ppc64le">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="0f16b02dd2bb8155ecef50629205547f394e2cbc568ea58bc86aca1326f6057b" name="npm18" arch="s390x">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="1167bb01c335e0a79eafbc207c6e73009a7e1cde97ed08f6b6619903b0ad9302" name="npm18" arch="x86_64">
  <version epoch="0" ver="18.16.1" rel="150400.9.9.1"/>
  <changelog author="adam.majer@suse.de" date="1664193600">- Update to Nodejs 18.9.1:
  * deps: llhttp updated to 6.0.10
    + CVE-2022-32213 bypass via obs-fold mechanic (bsc#1201325)
    + Incorrect Parsing of Multi-line Transfer-Encoding
    (CVE-2022-32215, bsc#1201327)
    + Incorrect Parsing of Header Fields (CVE-2022-35256, bsc#1203832)
  * crypto: fix weak randomness in WebCrypto keygen
    (CVE-2022-35255, bsc#1203831)</changelog>
  <changelog author="adam.majer@suse.de" date="1664452800">- Update to NodeJS 18.10.0:
  * deps: upgrade npm to 8.19.2
  * http: throw error on content-length mismatch
  * stream: add ReadableByteStream.tee()
- openssl3_fixups.patch: upstreamed and removed</changelog>
  <changelog author="dmueller@suse.com" date="1665144000">- skip more tests for riscv64/qemu emulation</changelog>
  <changelog author="adam.majer@suse.de" date="1665576000">- qemu_timeouts_arches.patch: set timeouts on riscv5 to 7x normal</changelog>
  <changelog author="adam.majer@suse.de" date="1666008000">- Update to NodeJS 18.11.0:
  * added experimental watch mode -- running in 'watch' mode using
    node --watch restarts the process when an imported file is changed
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * lib: refactor transferable AbortSignal
  * src: add detailed embedder process initialization API
  * util: add default value option to parsearg
- legacy_python.patch, versioned.patch: updated</changelog>
  <changelog author="adam.majer@suse.de" date="1666958400">- Update to NodeJS 18.12.0 LTS:
  * Running in 'watch' mode using node --watch restarts the process
    when an imported file is changed.
  * fs: add FileHandle.prototype.readLines
  * http: add writeEarlyHints function to ServerResponse
  * http2: make early hints generic
  * util: add default value option to parsearg</changelog>
  <changelog author="adam.majer@suse.de" date="1667822400">- Update to NodeJS 18.12.1 LTS:
  * inspector: DNS rebinding in --inspect via invalid octal IP
    (bsc#1205119, CVE-2022-43548)</changelog>
  <changelog author="adam.majer@suse.de" date="1667822401">- Fix migration to openssl-3 (bsc#1205042)</changelog>
  <changelog author="adam.majer@suse.de" date="1668081600">- icu721_fixes.patch: fixes compatibility with ICU 72.1 (bsc#1205236)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1671796800">- Update _constraints:
  * Less RAM for aarch64 and 32-bit arm
  * Use 'asimdrdm' cpu flag to use aarch64 workers where tests
    are more stable</changelog>
  <changelog author="adam.majer@suse.de" date="1673870400">- Update to NodejJS 18.13.0 LTS:
  * build: disable v8 snapshot compression by default
  * crypto: update root certificates
  * deps: update ICU to 72.1
  * doc:
    + add doc-only deprecation for headers/trailers setters
    + add Rafael to the tsc
    + deprecate use of invalid ports in url.parse
    + deprecate url.parse()
  * lib: drop fetch experimental warning
  * net: add autoSelectFamily and autoSelectFamilyAttemptTimeout options
  * src:
    + add uvwasi version
    + add initial shadow realm support
  * test_runner:
    + add t.after() hook
    + don't use a symbol for runHook()
  * tls:
    + add "ca" property to certificate object
  * util:
    + add fast path for utf8 encoding
    + improve textdecoder decode performance
    + add MIME utilities
- new_python3.patch, icu721_fixes.patch: upstreamed, removed</changelog>
  <changelog author="adam.majer@suse.de" date="1674648000">- Again use openssl-3, if available.
- _constraints: reset aarch64 memory requirements back to original
  otherwise some unit tests can fail
- s390.patch: fix unit test on s390 with patched zlib</changelog>
  <changelog author="dimstar@opensuse.org" date="1675252800">- Do not use pkg_vcmp to decide BuildDependencies: this works based
  on 'installed packages' which is not interpreted correctly by the
  scheduler. Rather switch to boolean dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1675425600">- Update to NodeJS 18.14.0 LTS:
  * deps:
    + update npm to 9.2.0
  * http:
    + join authorization headers
    + improved timeout defaults handling
  * stream:
    + implement finished() for ReadableStream and WritableStream
- refreshed patches: linker_lto_jobs.patch, npm_search_paths.patch,
  versioned.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1677067200">- Update to NodeJS 18.14.2 LTS:
  * deps: upgrade npm to 9.5.0 (bsc#1208744, CVE-2022-25881)
  * deps: update undici to 5.20.0
- Changes in version 18.14.1:
  * fixes permissions policies can be bypassed via process.mainModule
    (bsc#1208481, CVE-2023-23918)
  * fixes insecure loading of ICU data through ICU_DATA environment
    variable (bsc#1208487, CVE-2023-23920)
  * fixes OpenSSL error handling issues in nodejs crypto library
    (bsc#1208483, CVE-2023-23919)
  * updates undici to v5.19.1
    + Fetch API in Node.js did not protect against CRLF injection in host headers
    + Regular Expression Denial of Service in Headers in Node.js fetch API
    (bsc#1208413, bsc#1208485, CVE-2023-24807, CVE-2023-23936)
- versioned.patch: refreshed
- sysctl.patch: unit test fixes</changelog>
  <changelog author="adam.majer@suse.de" date="1677153600">- node-gyp_7.1.2.tar.xz: added dependencies so they don't conflict with
  npm dependencies.</changelog>
  <changelog author="adam.majer@suse.de" date="1678276800">- Update to NodeJS 18.15.0 LTS version:
  * test_runner:
    + add initial code coverate support
    + add reporters
  * fs: add statfs()
  * buffer: add isAscii()
- s390.patch, sysctl.patch: upstreamed and removed</changelog>
  <changelog author="adam.majer@suse.de" date="1678708800">- relax Requires to Suggests for alts on TW</changelog>
  <changelog author="adam.majer@suse.de" date="1681387200">- Update to NodeJS 18.16.0 LTS version
  * Add initial support for single executable applications
  * Replace url parser with Ada
  * buffer: add Buffer.copyBytesFrom
- refreshed patches: versioned.patch linker_lto_jobs.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1687348800">- Update to version 18.16.1 (security fixes only). The following
  CVEs are fixed in this release:
  * (CVE-2023-30581, bsc#1212574): mainModule.__proto__ Bypass
    Experimental Policy Mechanism (High)
  * (CVE-2023-30585, bsc#1212579): Privilege escalation via
    Malicious Registry Key manipulation during Node.js
    installer repair process (Medium)
  * (CVE-2023-30588, bsc#1212581): Process interuption due to invalid
    Public Key information in x509 certificates (Medium)
  * (CVE-2023-30589, bsc#1212582): HTTP Request Smuggling via
    Empty headers separated by CR (Medium)
  * (CVE-2023-30590, bsc#1212583): DiffieHellman does not
    generate keys after setting a private key (Medium)
  * c-ares security issues:
    + CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
    + CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
    + CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
    + CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
- fix_ci_tests.patch: increase default timeout on unit tests
  to 20min from 2min. This seems to have lead to build failures
  on some platforms, like s390x in Factory. (bsc#1211407)</changelog>
</package>
<package pkgid="fb7db39cfd5747237ad4618706307a721885728cef9e1f2d929099ed9de7aeea" name="nss-myhostname" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="f9f19e409fceb5aeeab35701a90112f00c0ddada90f28cac5a94c8382c7c16ba" name="nss-myhostname" arch="ppc64le">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="8be92b94b1492a4e2cdb99f050f94d1980d04a93868cfed2f51ecdea6c1cb072" name="nss-myhostname" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="3c44881977cc60803905c701ac5fe7539d4fc230bd19493a3c42e11f3af516fa" name="nss-myhostname" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="dd26a3442e04a38ccd791436404475617ecbd41918c5da62a19433337858759a" name="nss-myhostname-32bit" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="190d94607df08756f2d0c48c86e58c71e55c4864fb9066b9f93d75c83dc734ea" name="nss-systemd" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="bd56b8c44071ed769e1d660312aaa2cd9cdec828d4e9a251f473997d9a1460e8" name="nss-systemd" arch="ppc64le">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="a1a4746e882cb008f013899f0a34e1c6e68369ae46ebe01424da4ebb051ed1c4" name="nss-systemd" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="73f2df0efd80beeb8853a1216434c2b11aa33ebd1c0c93793885f60116cc9dfe" name="nss-systemd" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="63f7208b24b9500dfdf6f9085e3610fe3c42f448f075faa77a89be0b741156ee" name="ntp" arch="aarch64">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="bec800eb57d1cf489792054b9837cb2c8ad4e99dd30cfd844515ed5ed541f4c8" name="ntp" arch="ppc64le">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="f5091a50e8d90f636863df34591255b5ba719448ac0f38841b6df09c230b715d" name="ntp" arch="s390x">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="6ca0ff798bcc069a98d921771423d27a2b44cbf122f500afa40d1eebd23b0319" name="ntp" arch="src">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="58feff4ff9dbff62612d4a6639250c48053e370801e0e7dbea4b514fe65c30e8" name="ntp" arch="x86_64">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="f4ffcfefd7808fdabcbb1f21207d631bc7329ec9052c05437a483f2efefb79ce" name="ntp-doc" arch="aarch64">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="887b6293a78a0a68d656c8f1e860cbdc083eb298b9a62d82a10c2eae839f0400" name="ntp-doc" arch="ppc64le">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="eb5aafa3b4acfe1f698e8dabb821769a7f82d2d637d7ea80a27ebf7f030194e2" name="ntp-doc" arch="s390x">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="809596ef97bd0b5d37cfeede7fac377bce21edbf15c6650b88c887754aae5405" name="ntp-doc" arch="x86_64">
  <version epoch="0" ver="4.2.8p17" rel="150000.4.25.1"/>
  <changelog author="max@suse.com" date="1484654400">- Remove 50-ntp.list (bsc#1011919).
- Use system-wide libevent instead of local copy.</changelog>
  <changelog author="kukuk@suse.de" date="1487678400">- Move ntp-kod to /var/lib/ntp, because /var/db is not a
  standard directory and causes problems for transactional updates
  (ntp-move-kod-file.patch)</changelog>
  <changelog author="max@suse.com" date="1489147200">- Fix a problem with multicast clients.
  (bsc#1018940, ntp-unbreak-multicast.patch)</changelog>
  <changelog author="max@suse.com" date="1490184000">- Update to 4.2.8p10 (bsc#1030050):
  * Sec 3389 / CVE-2017-6464 / VU#325339: NTP-01-016 NTP:
    Denial of Service via Malformed Config
  * Sec 3388 / CVE-2017-6462 / VU#325339: NTP-01-014 NTP:
    Buffer Overflow in DPTS Clock
  * Sec 3387 / CVE-2017-6463 / VU#325339: NTP-01-012 NTP:
    Authenticated DoS via Malicious Config Option
  * Sec 3386: NTP-01-011 NTP:
    ntpq_stripquotes() returns incorrect Value
  * Sec 3385: NTP-01-010 NTP:
    ereallocarray()/eallocarray() underused
  * Sec 3381: NTP-01-006 NTP: Copious amounts of Unused Code
  * Sec 3380: NTP-01-005 NTP: Off-by-one in Oncore GPS Receiver
  * Sec 3379 / CVE-2017-6458 / VU#325339: NTP-01-004 NTP:
    Potential Overflows in ctl_put() functions
  * Sec 3378 / CVE-2017-6451 / VU#325339: NTP-01-003
    Improper use of snprintf() in mx4200_send()
  * Sec 3377 / CVE-2017-6460 / VU#325339: NTP-01-002
    Buffer Overflow in ntpq when fetching reslist
  * Sec 3376: NTP-01-001 Makefile does not enforce Security Flags
  * Sec 3361 / CVE-2016-9042 / VU#325339: 0rigin (zero origin) DoS.
  * [Bug 3393] clang scan-build findings
  * [Bug 3363] Support for openssl-1.1.0 without compatibility modes
  * [Bug 3356] Bugfix 3072 breaks multicastclient
  * [Bug 3173] forking async worker: interrupted pipe I/O
  * [Bug 3139] (...) time_pps_create: Exec format error
  * [Bug 3107] Incorrect Logic for Peer Event Limiting
  * [Bug 3062] Change the process name of forked DNS worker
  * [Bug 2923] Trap Configuration Fail
  * [Bug 2896] Nothing happens if minsane &lt; maxclock &lt; minclock
  * [Bug 2851] allow -4/-6 on restrict line with mask
  * [Bug 2645] out-of-bound pointers in ctl_putsys and decode_bitflags
- Removed patches:
  * ntp-openssl-version.patch: fixed upstream
  * ntp-processname.patch: accepted upstream
  * ntp-trap.patch: accepted upstream
  * ntp-unbreak-multicast.patch: fixed upstream
- Remove spurious log messages (bsc#1014172, ntp-warnings.patch).</changelog>
  <changelog author="aj@ajaissle.de" date="1491480000">- Fix spelling and default values in conf.sysconfig.ntp</changelog>
  <changelog author="max@suse.com" date="1491480001">- Enable experimental leap smearing (fate#321003).
  See /usr/share/doc/packages/ntp/README.leapsmear for details.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1513684800">- Restart nptd if failed or aborted (FATE#315133).
- Do not try to set the HW clock when adding a server at runtime
  to avoid blocking systemd.</changelog>
  <changelog author="bwiedemann@suse.com" date="1513857600">- Add ntp-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="max@suse.com" date="1519819200">- Update to 4.2.8p11 (bsc#1082210):
  * CVE-2016-1549: Sybil vulnerability: ephemeral association
    attack. While fixed in ntp-4.2.8p7, there are significant
    additional protections for this issue in 4.2.8p11.
  * CVE-2018-7182, bsc#1083426: ctl_getitem(): buffer read overrun
    leads to undefined behavior and information leak.
  * CVE-2018-7170, bsc#1083424: Multiple authenticated ephemeral
    associations.
  * CVE-2018-7184, bsc#1083422: Interleaved symmetric mode cannot
    recover from bad state.
  * CVE-2018-7185, bsc#1083420: Unauthenticated packet can reset
    authenticated interleaved association.
  * CVE-2018-7183, bsc#1083417: ntpq:decodearr() can write beyond
    its buffer limit.
  * Obsoletes these patches: ntp-sntp-a.patch, ntp-warnings.patch
- Remove dead code from conf.start-ntpd (bsc#1082063).
- Don't use libevent's cached time stamps in sntp.
  (bsc#1077445, ntp-sntp-libevent.patch)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1521374400">- change example statsdir in ntp.conf to /var/log/ntpstats/ to match
  the AppArmor profile (boo#1076247)</changelog>
  <changelog author="max@suse.com" date="1524571200">- Refactor the key handling in %post so that it does not overwrite
  user settings (bsc#1036505) and is more robust against ignored
  SIGPIPE (bsc#1090564).</changelog>
  <changelog author="max@suse.com" date="1536667200">- Update to 4.2.8p12 (bsc#1111853):
  * CVE-2018-12327, bsc#1098531: fixed stack buffer overflow in
    the openhost() command-line call of NTPQ/NTPDC.
  * Add further tweaks to improve the fix for CVE-2018-7170,
    bsc#1083424.
  * ntp-usrgrp-resolver.patch was integrated upstream.
- Don't run autoreconf anymore and remove all related hacks and
  BuildRequires.</changelog>
  <changelog author="max@suse.com" date="1552305600">- Update to 4.2.8p13
  * CVE-2019-8936, bsc#1128525: Crafted null dereference attack in
    authenticated mode 6 packet.
  * Fix several bugs in the BANCOMM reclock driver.
  * Fix ntp_loopfilter.c snprintf compilation warnings.
  * Fix spurious initgroups() error message.
  * Fix STA_NANO struct timex units.
  * Fix GPS week rollover in libparse.
  * Fix incorrect poll interval in packet.
  * Add a missing check for ENABLE_CMAC.</changelog>
  <changelog author="max@suse.com" date="1593086400">- Update to 4.2.8p15
- Fixed security issues:
  * bsc#1169740, CVE-2020-11868:
    DoS on client ntpd using server mode packet
  * bsc#1171355, CVE-2018-8956: remote attackers may prevent a
    broadcast client from synchronizing its clock with a broadcast
    NTP server via spoofed mode 3 and mode 5 packets.
  * bsc#1172651, CVE-2020-13817: vulnerable to off-path attack
  * bsc#1173334, CVE-2020-15025: Remote DoS when CMAC key is used
- Bugfixes in 4.2.8p15 and 4.2.8p14 include:
  * [Bug 3667] decodenetnum fails with numeric port
  * [Bug 3666] avoid unlimited receive buffer allocation
  * [Bug 3660] Manycast orphan mode startup discovery problem.
  * [Bug 3655] ntpdc memstats hash counts
  * [Bug 3653] Refclock jitter RMS calculation
  * [Bug 3646] Avoid sync with unsync orphan
  * [Bug 3644] Unsynchronized server [...] selected as candidate
  * [Bug 3636] NMEA: combine time/date from multiple sentences
  * [Bug 3635] Make leapsecond file hash check optional
  * [Bug 3628] raw DCF decoding - improve robustness
  * [Bug 3620] memory leak in ntpq sysinfo
  * [Bug 3619] Honour drefid setting in cooked mode and sysinfo
  * [Bug 3617] Add support for ACE III and Copernicus II receivers
  * [Bug 3615] accelerate refclock startup
  * [Bug 3613] Propagate noselect to mobilized pool servers
  * [Bug 3612] Use-of-uninitialized-value in receive function
  * [Bug 3611] NMEA time interpreted incorrectly
  * [Bug 3609] Fixing wrong falseticker in case of non-statistic jitter
  * [Bug 3604] Wrong param byte order passing into
    record_raw_stats() in ntp_io.c
  * [Bug 3594] ntpd discards messages coming through nmead
  * [Bug 3593] ntpd discards silently nmea messages after the 5th string
  * [Bug 3590] Update refclock_oncore.c to the new GPS date API
  * [Bug 3583] synchronization error - set clock to base date
    if system time is before that limit
  * [Bug 3582] gpsdjson refclock fudgetime1 adjustment is doubled
  * [Bug 3580] Possible bug ntpq-subs (NULL dereference in dogetassoc)
  * [Bug 3577] Update refclock_zyfer.c to the new GPS date API
  * [Bug 3576] New GPS date function API
  * [Bug 3573] nptdate: missleading error message
  * [Bug 3569] cleanup MOD_NANO/STA_NANO handling for 'ntpadjtimex()'
  * [Bug 3550] Reproducible build: Respect SOURCE_DATE_EPOCH
  * [Bug 3542] ntpdc monlist parameters cannot be set
  * [Bug 3533] ntpdc peer_info ipv6 issues
  * [Bug 3531] make check: test-decodenetnum fails
  * [Bug 3515] Refactor ntpdmain() dispatcher loop and group
    common code
  * [Bug 3491] Signed values of LFP datatypes should always
    display a sign
  * [Bug 3490] Patch to support Trimble Resolution Receivers
  * [Bug 3473] RefID of refclocks should always be text format
  * [Bug 3094] ntpd trying to listen for broadcasts on a
    completely ipv6 network
  * [Bug 2420] ntpd doesn't run and exits with retval 0 when
    invalid user is specified with -u
  * [Bug 1433] runtime check whether the kernel really supports
    capabilities
  * Provide more detail on unrecognized config file parser tokens.
  * Startup log improvements.
- Obsoleted patches:
  * ntp-4.2.6p2-ntpq-speedup-782060.patch
  * ntp-daemonize.patch
  * ntp-reproducible.patch
- Silence an OpenSSL version warning (bsc#992038,bsc#1125401
  ntp-openssl-version.patch).</changelog>
  <changelog author="max@suse.com" date="1619092800">- bsc#1185171:
  Use /run instead of /var/run for PIDFile in ntpd.service.</changelog>
  <changelog author="max@suse.com" date="1621512000">- jsc#SLE-15482, ntp-clarify-interface.patch:
  Adjust the documentation to clarify that "interface ignore all"
  does not cover the wildcard and localhost addresses.</changelog>
  <changelog author="max@suse.com" date="1623758400">- bsc#1186431: Fix a typo in %post .</changelog>
  <changelog author="max@suse.com" date="1683288000">- bsc#1210386: out-of-bounds writes in mstolfp()
  * CVE-2023-26551, CVE-2023-26552, CVE-2023-26553, CVE-2023-26554
  * Add ntp-CVE-2023-26551.patch</changelog>
  <changelog author="max@suse.com" date="1686139200">- Update to 4.2.8p17:
  * Fix some regressions of 4.2.8p16
- Update to 4.2.8p16:
  * [Sec 3808] Assertion failure in ntpq on malformed RT-11 date
  * [Sec 3807], bsc#1210390, CVE-2023-26555:
    praecis_parse() in the Palisade refclock driver has a
    hypothetical input buffer overflow.
  * [Sec 3767] An OOB KoD RATE value triggers an assertion when
    debug is enabled.
  * Obsoletes: ntp-CVE-2023-26551.patch, ntp-sntp-dst.patch,
    ntp-ENOBUFS.patch
  * Multiple bug fixes and improvements. For details, see:
    /usr/share/doc/packages/ntp/ChangeLog
    http://www.ntp.org/support/securitynotice/4_2_8-series-changelog/
- Follow upstream's suggestion to build with debugging disabled:
  https://www.ntp.org/support/securitynotice/ntpbug3767/</changelog>
</package>
<package pkgid="c3b7a3f34dbaa0849764648e1a1071d544a958b55c4b58c0a39ca470f41411ff" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="08257592d8f65f1f75d45cf7e4bb8f7abb75003fef4569b69d2adc5f34615447" name="nvme-cli" arch="ppc64le">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="fc57cdb6faedb3a42d765520145ae1d78ed28c3846e382dd5c7a53780c8d1799" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="ef10e019bcc7f141985ef754871b00e26dd4a5811140fd26e950f6594936d365" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="ebeba83d2e15a1c521e0354160674f32534e89e2975231e7bb9acf97757dd50a" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="4717ab39818f938a7b681ffe5dcc648b246364d67a0cf7576a580fc4828be535" name="nvme-cli-bash-completion" arch="noarch">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="aea6e530f45e17691bd90b09670031a6196de8e0771a155a09311c89d61d8a63" name="nvme-cli-regress-script" arch="noarch">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="eca582fe18c3b1b35330702bc6cc0b0f53c39b9418777b39d30bec81c3a7ec90" name="nvme-cli-zsh-completion" arch="noarch">
  <version epoch="0" ver="2.4+17.gf4cfca93998a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 2.2.1 (jsc#ped-553):
  * Added parsing for Solidigm telemetry observable data.
  * Revert "udev: re-read the discovery log page when a discovery controller reconnected"
  * add item ddr_ecc_err_cnt in smart-log-add
  * build and install fixes/improvements
  * build: Add minimum build requirement on libnvme
  * build: Drop dependency on libuuid
  * build: Extend release script to support micro version releases
  * build: Fix endian check for cross build
  * build: Remove unused uuid.wrap file
  * build: Remove unusned uuid.h include
  * build: Update release version rules
  * build: Update version before regenerating docs
  * completions: Add show-topology tab completion
  * documentation fixes
  * fabrics: Avoid nvme_scan_ctrl when disconnecting
  * fabrics: Honor JSON config file in connect-all command
  * fabrics: Remove dhchap-ctrl-secret from discover/connect-all
  * fabrics: Trigger auto connect if config.json exists
  * fabrics: fix 'persistent' handling during connect-all with JSON file
  * fabrics: nvme config --modify depends on -n and -t argument
  * fabrics: re-read the discovery log page when a discovery controller reconnected
  * json: Support uint64 types serialization for older json-c versions
  * meson: we don't need a c++ compiler
  * new solidigm plugin
  * nvme, plugins: fix __u64 -&gt; unsigned long long assumptions
  * nvme-print: Add missing values in id-ctrl for JSON output
  * nvme-print: Handle NULL hostid in JSON output
  * nvme-print: Output 128bit values as uint128 type instead of double
  * nvme-print: Print fguid as a UUID
  * nvme-print: Use uint128 JSON function for media_units_written
  * nvme-print: decode MI status values
  * nvme-print: decode status types
  * nvme-print: fix wrong json key
  * nvme-print: sanitize the get-feature async event config output
  * nvme: Add helper function to parse 16-bit comma separated list
  * nvme: Add nvme_cmd wrapper for get_features
  * nvme: Add show-topology command
  * nvme: Add wrapper for Format NVM
  * nvme: Add wrapper for Sanitize NVM
  * nvme: Add wrappers for Get Log page helpers
  * nvme: Add wrappers for Identify controller lists
  * nvme: Add wrappers for NS attach/detach
  * nvme: Add wrappers for NS management functions
  * nvme: Add wrappers for basic NS identify
  * nvme: Add wrappers for firmware commands
  * nvme: Do not print error message in collect_effects_log helper
  * nvme: Fix set feature command to get feature identifier 0Dh length as zero
  * nvme: Introduce a union in struct nvme_dev for different transport types
  * nvme: Introduce nvme_cli_ wrappers, wrap identify and identify_ctrl
  * nvme: Make static nvme_dev private to open_dev(), use locals elsewhere
  * nvme: Masks SSTAT in sanize-log output
  * nvme: Remove static nvme_dev, allocate on open instead
  * nvme: Set default rae value for nvme_get_nsid_log users
  * nvme: Simplify ns list identify
  * nvme: Use correct print format specifier for sizeof arguments
  * nvme: Use local struct nvme_dev for show_registers &amp; map_registers
  * nvme: check if cfg.metadata is NULL before passing it to strlen()
  * nvme: use helpers for checking status types
  * plugins/innogrit: Include timer.h
  * plugins/innogrit: add smart items for smart-log-add
  * plugins/micron-nvme: Use correct print format specifier for sizeof arguments
  * plugins/ocp: Include timer.h
  * plugins/ocp: Output 128bit values as uint128 type instead of double
  * plugins/ocp: drop unused fd argument
  * plugins/ocp: pass struct nvme_dev to internal functions
  * plugins/seagate: Add support for OCP
  * plugins/solidigm: fix return value on format parse failure
  * plugins/toshiba: pass struct nvme_dev rather than fd + name
  * plugins/virtium: Output 128bit values as uint128 type instead of double
  * plugins/wdc: Add support for SN660 drive
  * plugins/wdc: Add type case for feature id
  * plugins/wdc: Output 128bit values as uint128 type instead of double
  * plugins/wdc: fix memset() on the address of a pointer
  * plugins/wdc: pass a struct nvme_dev around rather than a fd
  * plugins/wdc: pass struct nvme_dev rather than using global nvme_dev
  * plugins/wdc: prevent duplicate close on NVMe device
  * plugins/wdc: remove fd argument from print functions
  * plugins/ytmc: pass struct nvme_dev rather than fd + name
  * plugins: Use PRIu64 format specifier for 64bit types
  * print: Add Controller Ready Timeout Exceeded HW error code
  * print: Fix nvme_id_uuid_list
  * solidgm: fix initialization warning
  * solidigm: Added parsing for telemetry customer screenable data
  * solidigm: Fix printf format for size_t variable
  * solidigm: Updated Telemetry parsing code to MIT license.
  * subprojects/libnvme: update for MI admin command coverage
  * tests: Update license to GPL-2.0-or-later
  * tree: Add NVMe-MI support
  * tree: Add dev_fd() helper
  * tree: Change nvme_dev from global to static
  * tree: Combine NVMe file descriptor into struct nvme_dev
  * tree: Move global device info to a single struct
  * tree: fail on non-negative return values from parse_and_open
  * udev: Add HOST_IFACE to udev rule
  * util/json.h: Add json_object_get_uint64 fallback implementation
  * util/json: Add 128 bit JSON helpers
  * util/types: Add 128 bit conversion helpers
  * util: Fix le128_to_cpu on big-endian
  * util: Fix le128_to_cpu on little-endian
  * util: Move common type conversion helpers into util section
  * utils/json: Add json_object_new_uint64 for json-c &lt; 0.14
  * utils: Fix uint128_t usage
  * various fixes reported by coverity
  * version reporting includes library version
  * wdc:  OCP Log page updates and fixes
  * wrapper: Add weak nvme_init_copy_range_f1 symbol
  * wrapper: Call library version of nvme_init_copy_range_f1
  * wrapper: Update SPDIX license
  * zns.c: report zones should be started after retrieved zone
- Drop upsreamp patches
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
- Handle suse-missing-rclink lint warnings by providing the symlinks
- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- Mark no binaries rpms as noarch</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 2.2.1+3.gd028407:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Add %check section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- spec file: fix "check" section (bsc#1207686)
- add "Provides: nvmeof-boot-support = 0.1"</changelog>
  <changelog author="daniel.wagner@suse.com" date="1684929600">- Update to version v2.4 (jsc#PED-553 jsc#PED-3884)
  - Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
  - Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
  - Build documentation to be up to date
  - Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
  - Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
  - Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
  - Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services
  - Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
  - remove 0100-harden_nvmf-connect@.service.patch
- Added compat commands for nbft back
- Changed default behavior of connect-all to match with old nbft
  behavior
- Replaced old nbft implementation with upstream one
- Rebuild documentation on package update
- Set version-tag so that version are correctly reported
- Fix connect nbft regressions (bsc#1209905)
  * fabrics: fix argc in show_nbft_compat_cmd()
- Fix auto connect conditions (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Fix auto boot for NBFT connections (bsc#1211647)
  * fabrics: add udev rule to avoid renaming nbft interfaces
  * fabrics: autoconnect: add service unit for connecting NBFT subsystems</changelog>
</package>
<package pkgid="0d62aa1e121fb4e499e8ea5e8d12cfe7734b70851b9ee294b6d5a7957cbe531a" name="nvme-stas" arch="aarch64">
  <version epoch="0" ver="2.2" rel="150500.3.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
</package>
<package pkgid="d1bebde911c5431429e3c3063bcbf60a4ed48f755eb40656bae0bbe138f6fca4" name="nvme-stas" arch="ppc64le">
  <version epoch="0" ver="2.2" rel="150500.3.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
</package>
<package pkgid="e9f0c35e1dc48be27b5b69984e2bc33bb914e23dd820925b07306fae9255b34a" name="nvme-stas" arch="s390x">
  <version epoch="0" ver="2.2" rel="150500.3.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
</package>
<package pkgid="cc32af03c67f6672220742d2b6934eb6a385ecc023ff38fe10f36e948453b221" name="nvme-stas" arch="src">
  <version epoch="0" ver="2.2" rel="150500.3.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
</package>
<package pkgid="338d52a5263706de963a4a5a55a882b3447997036b1443489a4d77076e42742c" name="nvme-stas" arch="x86_64">
  <version epoch="0" ver="2.2" rel="150500.3.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
</package>
<package pkgid="6a1e0b0fc7791fc36b9059b627b8ea97a9f68f24358fe198dda36fc3b52c049a" name="nvme-stas" arch="aarch64">
  <version epoch="0" ver="2.2.2" rel="150500.3.6.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Update to version 2.2.1:
  * staslib: Fix setting controller DHCHAP key (bsc#1211557)</changelog>
  <changelog author="mwilck@suse.com" date="1686571200">- Update to version 2.2.2:
  Fix python crash caused by wrong transport identifier handling
  (bsc#1211557)</changelog>
</package>
<package pkgid="0529a589f4c6e783a56e9fea9ba2eb9a882a4bd36e72a31ac551ba29cbfd834f" name="nvme-stas" arch="ppc64le">
  <version epoch="0" ver="2.2.2" rel="150500.3.6.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Update to version 2.2.1:
  * staslib: Fix setting controller DHCHAP key (bsc#1211557)</changelog>
  <changelog author="mwilck@suse.com" date="1686571200">- Update to version 2.2.2:
  Fix python crash caused by wrong transport identifier handling
  (bsc#1211557)</changelog>
</package>
<package pkgid="131d4044072ed23df09a5e78fdb301ec2935925abcac036a3a19b86e573b7333" name="nvme-stas" arch="s390x">
  <version epoch="0" ver="2.2.2" rel="150500.3.6.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Update to version 2.2.1:
  * staslib: Fix setting controller DHCHAP key (bsc#1211557)</changelog>
  <changelog author="mwilck@suse.com" date="1686571200">- Update to version 2.2.2:
  Fix python crash caused by wrong transport identifier handling
  (bsc#1211557)</changelog>
</package>
<package pkgid="a137ac12515b832522c7e5f63c992604172df7e6dc55561b152b0188cccf806e" name="nvme-stas" arch="src">
  <version epoch="0" ver="2.2.2" rel="150500.3.6.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Update to version 2.2.1:
  * staslib: Fix setting controller DHCHAP key (bsc#1211557)</changelog>
  <changelog author="mwilck@suse.com" date="1686571200">- Update to version 2.2.2:
  Fix python crash caused by wrong transport identifier handling
  (bsc#1211557)</changelog>
</package>
<package pkgid="37d7a903021a948c1117576dd66ac8774be7770f6b1139ec8ae860bdff84ddbf" name="nvme-stas" arch="x86_64">
  <version epoch="0" ver="2.2.2" rel="150500.3.6.1"/>
  <changelog author="daniel.wagner@suse.com" date="1643284800">- Initial nvme-stas packaging</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645012800">- Update to version 1.0-rc1:
  * fix comment
  * Perform explicit registration from user-space
  * Add known image to docker-compose
  * Add docker run/build way to README
  * Actions: Disable actions/setup-python
  * Actions: Work on incoming branch
  * Fixing docker compilation error
  * Update docker-publish.yml
  * Fix github workflow
  * removed unused code
  * D-Bus config fixes.
  * github workflow actions - fix PYTHONPATH</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645617600">- Update to version 1.0-rc2:
  * Fis github workflows to pull from upstream libnvme
  * TP8010 was merged into upstream libnvme. Some APIs have changed.
    This is to update nvme-stas to the new APIs.
  * A bunch of mostly cosmetic changes
  * Cleaning up a few things.
  * Simplifying mDNS configuration and updating documentation.
  * Changed DBus rules to only block setting properties
  * Restrict the Dbus "deny" rules to only the debug interface.</changelog>
  <changelog author="dimstar@opensuse.org" date="1646308800">- Add gobject-introspection BuildRequires: enable typelib
  introspection. This allows RPM to add a bunch of autodetected
  dependenices by inspecting the python scripts (basedon
  python-gobject).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308801">- Correct License information. This project is licenced under
  Apache License 2.0.
- Mark sys.conf.doc as config file.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648036800">- Update to version 1.0-rc4:
  * Check ignore-iface when creating TransportId object
  * Adding man pages for ip-family and ignore-iface
  * Add ignore-iface and ip-family conf. options
  * Update the documentation
  * Change default address returned by name resolver
  * Filter out invalid IP addresses. (bsc#1197361)
  * When reading the Host NQN, warn people if the NQN seems invalid
  * Print descriptive message when unable to run stafctl/stacctl
  * Use the newly added cntlrtype to check the type of controller
  * minor fix to previous change to set the log level on libnvme
  * LOG: enable libnvme debug when trace is enabled
- Added python3-netifaces dependency</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648209600">- Update to version 1.0-rc5:
  * Remove misconfiguration check. (bsc#1197361)
  * Document how to increase the number of interfaces that Avahi can monitor.
- Removed python3-netifaces dependency (bsc#1197361)
- Added ahahi dependency
- Do not list files twice (add %dir to directory paths)
- Drop workaround for Python interpreter path fixup.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649246400">- Update to version v1.0:
  * Do not call persistent_set() from libnvme
  * dbus: return native dbus data instead of json when possible.
  * update documentation</changelog>
  <changelog author="mwilck@suse.com" date="1656936000">- Update to version 1.1.5 (bsc#1200128)
  Bug fix release
  * udev: fix I/O controller scan &amp; detect algorithm
  * stacd: Fix D-Bus race condition between stacd and stafd.
  * staslib: fix support for fibre channel
  * doc: update README.md
  * staslib: fix race conditions during controller object removal.
  * stacd: fix defered call to remove_controller() with wrong arguments
  * staslib: make sure controller object gets "purged" when removed.
  * staslib: calling wrong cback function on controller removal.
  * staslib: Fix cback function deleting object that called the cback.
  * stacd: audit connections
  * stafd, stacd: Add man page to systend service file.
  * stacd: Add configuration parameter 'sticky-connections'
  * doc: troubleshoot guide for missing mDNS packets
  * stacd: allow disabling nvme-cli auto-connect udev rule.
- Added systemd service file (service disabled)
- Spec file: use %python_sitelib rather than %python_sitearch, and install
  everything under %{python_sitelib}/staslib</changelog>
  <changelog author="mwilck@suse.com" date="1659960000">- Update to version 1.1.6:
  Bug fix release
  * conf: Enable sticky-connections by default
  * staslib: check that async operation hasn't been cancelled before proceeding
  * stacd: fix I/O controller connection audits
  * staslib: add override support
  * systemd: add explicit dependency to modprobe@nvme_fabrics.service</changelog>
  <changelog author="mwilck@suse.com" date="1668513600">- Update to version 1.1.7:
  * staslib: Trim white spaces from DLPEs and manual configuration.
  (bsc#1204975)</changelog>
  <changelog author="mwilck@suse.com" date="1669032000">- Update to version 2.0 (jsc#PED-2487)
  * stafd: Add support for PLEO bit ("Port Local Entries Only",
  only with libnvme 1.2 or higher)
  * Add support for NCC bit ("Not Connected to CDC")
  * "sticky-connections" is replaced by "disconnect-scope+disconnect-trtypes"
  * "blacklist" is replaced by "exclude" (but still supported)
  * better udev support / coexistence
  * support for new kernel "src_addr" attribute
  * add patch: 0001-meson-disable-subproject.patch (to fix build in OBS)</changelog>
  <changelog author="mwilck@suse.com" date="1670932800">- Update to version 2.1:
  * stafd: Add zeroconf-connections-persistence conf. parameter
  * Avahi: Handle upper/lower case 'NQN/nqn' in TXT attribute
    (bsc#1205873)
  * stafd: Add "origin" parameter to DC controller objects
  * staslib: Trim whitespaces at the source (bsc#1204975)
  * udev: Throttle EnvironmentError exception messages
  * del patch: 0001-meson-disable-subproject.patch (not necessary any more)</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Update to version 2.1.2:
  * staslib: fix RoCE support (bsc#1207436)
  * staslib: Only display unresponsive timer info for "discovered" DCs
  * staslib: Fix Connect/Disconnect performed in reserve order
  * udev: Set udev event priority to high
  * stafd: Bug fix. Default "[Global] persistent-connections=false"
  * stafd: Handle unresponsive DCs in _config_ctrls_finish()
  * stafd: Fix handling of lost zeroconf-discovered DC
  * staslib: Improve name resolution algorithm
  * staslib: Add unit (sec) to timeout value in info() output</changelog>
  <changelog author="mwilck@suse.com" date="1680264000">- Update to version 2.2:
  * add DHCHAP support for in-band authentication (bsc#1208580)
  * staslib: Define LIBNVME_VERSION in defs.py
  * staslib: Disable udev-rule permanently
  * build: Change libnvme dependency from 1.2 to 1.3</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Update to version 2.2.1:
  * staslib: Fix setting controller DHCHAP key (bsc#1211557)</changelog>
  <changelog author="mwilck@suse.com" date="1686571200">- Update to version 2.2.2:
  Fix python crash caused by wrong transport identifier handling
  (bsc#1211557)</changelog>
</package>
<package pkgid="7d61e5ea14b04568e9a49e6fef4abc55ec8e40df3ffdc9b2493a03529177e9d8" name="ocfs2-kmp-azure" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="1a5d1a7ae1d6710e847e9380991db8bcbf2c6683b4d2b4bda49d58ad2357ae6d" name="ocfs2-kmp-azure" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150500.33.3.1"/>
  <changelog author="msuchanek@suse.de" date="1686225600">- Move setting %%supported_modules_check to config.sh
- commit 5ada69b</changelog>
  <changelog author="msuchanek@suse.de" date="1686225601">- Move setting %%split_optional to config.sh
- commit 77f3750</changelog>
  <changelog author="tiwai@suse.de" date="1686312000">- drm/msm: Set max segment size earlier (git-fixes).
- drm/i915/gt: Use the correct error value when kernel_context()
  fails (git-fixes).
- batman-adv: Broken sync while rescheduling delayed work
  (git-fixes).
- Bluetooth: L2CAP: Add missing checks for invalid DCID
  (git-fixes).
- Bluetooth: Fix l2cap_disconnect_req deadlock (git-fixes).
- Bluetooth: hci_qca: fix debugfs registration (git-fixes).
- wifi: cfg80211: fix locking in regulatory disconnect
  (git-fixes).
- wifi: cfg80211: fix locking in sched scan stop work (git-fixes).
- wifi: mt76: mt7615: fix possible race in mt7615_mac_sta_poll
  (git-fixes).
- can: j1939: avoid possible use-after-free when
  j1939_can_rx_register fails (git-fixes).
- can: j1939: change j1939_netdev_lock type to mutex (git-fixes).
- can: j1939: j1939_sk_send_loop_abort(): improved error queue
  handling in J1939 Socket (git-fixes).
- Input: xpad - delete a Razer DeathAdder mouse VID/PID entry
  (git-fixes).
- Input: fix open count when closing inhibited device (git-fixes).
- commit 0d88720</changelog>
  <changelog author="tiwai@suse.de" date="1686312001">- drm/amdgpu: fix Null pointer dereference error in
  amdgpu_device_recover_vram (git-fixes).
- Bluetooth: ISO: don't try to remove CIG if there are bound
  CIS left (git-fixes).
- commit 1a13c67</changelog>
  <changelog author="jslaby@suse.cz" date="1686312002">- Refresh
  patches.suse/0042-block-mq-deadline-Fix-dd_finish_request-for-zoned-devices.patch.
  Remove also per_prio from dd_finish_request(). There are no more users
  in 5.4. Silences the compiler warning:
  block/mq-deadline.c:830:22: error: unused variable ‘per_prio’
- commit ed6b28b</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1686312003">- devlink: hold region lock when flushing snapshots (git-fixes).
- xsk: Fix corrupted packets for XDP_SHARED_UMEM (git-fixes).
- net: devlink: Fix missing mutex_unlock() call (git-fixes).
- commit 59c3cb8</changelog>
  <changelog author="msuchanek@suse.de" date="1686312004">- Fix missing top level chapter numbers on SLE12 SP5 (bsc#1212158).
- commit 7ebcbd5</changelog>
  <changelog author="tiwai@suse.de" date="1686312005">- Update patch reference for memstick fix (CVE-2023-3141 bsc#1212129 bsc#1211449)
- commit 089d7db</changelog>
  <changelog author="iivanov@suse.de" date="1686312006">- Update patches.suse/efi-rt-wrapper-Add-missing-include.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit d2f0708</changelog>
  <changelog author="iivanov@suse.de" date="1686312007">- Update patches.suse/arm64-efi-Execute-runtime-services-from-a-dedicated-.patch (git-fixes bsc#1212155 CVE-2023-21102)
- commit 15cbf6b</changelog>
  <changelog author="msuchanek@suse.de" date="1686312008">- Move setting %%build_html to config.sh
- commit dd39da3</changelog>
  <changelog author="tiwai@suse.de" date="1686312009">- Update patch reference for fbcon fix (CVE-2023-3161 bsc#1212154)
- commit dd50606</changelog>
  <changelog author="tiwai@suse.de" date="1686398400">- pinctrl: meson-axg: add missing GPIOA_18 gpio group (git-fixes).
- ALSA: hda/realtek: Enable 4 amplifiers instead of 2 on a HP
  platform (git-fixes).
- ASoC: codecs: wsa881x: do not set can_multi_write flag
  (git-fixes).
- test_firmware: fix the memory leak of the allocated firmware
  buffer (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for renoir
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for vangogh
  (git-fixes).
- drm/amd/pm: reverse mclk and fclk clocks levels for yellow carp
  (git-fixes).
- fbcon: Fix null-ptr-deref in soft_cursor (git-fixes).
- mailbox: mailbox-test: fix a locking issue in
  mbox_test_message_write() (git-fixes).
- HID: google: add jewel USB id (git-fixes).
- regmap: Account for register length when chunking (git-fixes).
- dmaengine: pl330: rename _start to prevent build error
  (git-fixes).
- dmaengine: at_xdmac: fix potential Oops in
  at_xdmac_prep_interleaved() (git-fixes).
- drm/amdgpu: skip disabling fence driver src_irqs when device
  is unplugged (git-fixes).
- drm/msm: Be more shouty if per-process pgtables aren't working
  (git-fixes).
- ALSA: oss: avoid missing-prototype warnings (git-fixes).
- ASoC: ssm2602: Add workaround for playback distortions
  (git-fixes).
- ASoC: dwc: limit the number of overrun messages (git-fixes).
- wifi: b43: fix incorrect __packed annotation (git-fixes).
- wifi: mac80211: simplify chanctx allocation (git-fixes).
- wifi: rtl8xxxu: fix authentication timeout due to incorrect
  RCR value (git-fixes).
- media: mn88443x: fix !CONFIG_OF error by drop of_match_ptr
  from ID table (git-fixes).
- media: dvb_ca_en50221: fix a size write bug (git-fixes).
- media: netup_unidvb: fix irq init by register it at the end
  of probe (git-fixes).
- media: dvb-usb: dw2102: fix uninit-value in
  su3000_read_mac_address (git-fixes).
- media: dvb-usb: digitv: fix null-ptr-deref in digitv_i2c_xfer()
  (git-fixes).
- media: dvb-usb-v2: rtl28xxu: fix null-ptr-deref in
  rtl28xxu_i2c_xfer (git-fixes).
- media: dvb-usb-v2: ce6230: fix null-ptr-deref in
  ce6230_i2c_master_xfer() (git-fixes).
- media: dvb-usb-v2: ec168: fix null-ptr-deref in ec168_i2c_xfer()
  (git-fixes).
- media: dvb-usb: az6027: fix three null-ptr-deref in
  az6027_i2c_xfer() (git-fixes).
- media: dvb_demux: fix a bug for the continuity counter
  (git-fixes).
- fbdev: stifb: Fix info entry in sti_struct on error path
  (git-fixes).
- fbdev: modedb: Add 1920x1080 at 60 Hz video mode (git-fixes).
- fbdev: imsttfb: Fix use after free bug in imsttfb_probe
  (git-fixes bsc#1211387).
- drm/ast: Fix ARM compatibility (git-fixes).
- platform/x86: intel_scu_pcidrv: Add back PCI ID for Medfield
  (git-fixes).
- mailbox: mailbox-test: Fix potential double-free in
  mbox_test_message_write() (git-fixes).
- drm/amdgpu: Use the default reset when loading or reloading
  the driver (git-fixes).
- drm/amdgpu: release gpu full access after
  "amdgpu_device_ip_late_init" (git-fixes).
- watchdog: menz069_wdt: fix watchdog initialisation (git-fixes).
- tpm, tpm_tis: Request threaded interrupt handler (git-fixes).
- dmaengine: at_xdmac: Move the free desc to the tail of the
  desc list (git-fixes).
- ath6kl: Use struct_group() to avoid size-mismatched casting
  (git-fixes).
- commit 0cb0fbe</changelog>
  <changelog author="tiwai@suse.de" date="1686398401">- ALSA: hda: Glenfly: add HD Audio PCI IDs and HDMI Codec Vendor
  IDs (git-fixes).
- Refresh
  patches.suse/ALSA-hda-Add-NVIDIA-codec-IDs-a3-through-a7-to-patch.patch.
- commit 588740e</changelog>
  <changelog author="tiwai@suse.de" date="1686398402">- ALSA: hda/realtek: Add quirk for Clevo NS50AU (git-fixes).
- ALSA: hda/realtek: Add quirks for Asus ROG 2024 laptops using
  CS35L41 (git-fixes).
- ALSA: hda/realtek: Add Lenovo P3 Tower platform (git-fixes).
- ALSA: hda/realtek: Add a quirk for HP Slim Desktop S01
  (git-fixes).
- commit 74a4806</changelog>
  <changelog author="tiwai@suse.de" date="1686398403">- drm/amdgpu/gfx10: Disable gfxoff before disabling powergating
  (git-fixes).
- ACPI: resource: Add IRQ override quirk for LG UltraPC 17U70P
  (git-fixes).
- commit 74cc1a9</changelog>
  <changelog author="ailiop@suse.com" date="1686398404">- revert "squashfs: harden sanity check in
  squashfs_read_xattr_id_table" (git-fixes).
- commit fd69a9c</changelog>
  <changelog author="ailiop@suse.com" date="1686398405">- hfs/hfsplus: avoid WARN_ON() for sanity check, use proper
  error handling (git-fixes).
- commit 5599965</changelog>
  <changelog author="tiwai@suse.de" date="1686484800">- eeprom: at24: also select REGMAP (git-fixes).
- i2c: sprd: Delete i2c adapter in .remove's error path
  (git-fixes).
- i2c: mv64xxx: Fix reading invalid status value in atomic mode
  (git-fixes).
- arm64: dts: imx8mn-beacon: Fix SPI CS pinmux (git-fixes).
- arm64: dts: imx8-ss-dma: assign default clock rate for lpuarts
  (git-fixes).
- arm64: dts: imx8qm-mek: correct GPIOs for USDHC2 CD and WP
  signals (git-fixes).
- firmware: arm_ffa: Set handle field to zero in memory descriptor
  (git-fixes).
- arm64: dts: qcom: sc7180-lite: Fix SDRAM freq for misidentified
  sc7180-lite boards (git-fixes).
- commit 031042b</changelog>
  <changelog author="osalvador@suse.de" date="1686571200">- Rename colliding patches before merging SLE15-SP4
- commit 4c05fe2</changelog>
</package>
<package pkgid="6ddfe98be83f8037e3248ca09812a1c69d0909e77b86c67ce04a2c239977ee2d" name="open-vm-tools" arch="aarch64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="a3747306348439e978efae5c10bdad0105091465aecd394423572f33a6663a24" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="a2d75bceb12e53a9c33b11d4e758dcd72ec88c9f349b65fc1ae579adbe6228c1" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="f8abcb9524c1f5e688955751682b992ca4aa5855fe65f25e18984f4ef4cc2713" name="open-vm-tools-desktop" arch="aarch64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="ccaef6085691618c8c47240f1f514b7e04bc8e6fba9f265c38606fcba6b311fd" name="open-vm-tools-desktop" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="f2543c088cef5e651c56375c3059d0dc8721b614e5204b0d0a22b8108c2309ea" name="open-vm-tools-salt-minion" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="56448d62d0a77fea19d2b309eeb60fe88441ab300953973a0563eef24fd59cba" name="open-vm-tools-sdmp" arch="aarch64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="c61f441588054ec4b1a944be56c42f71aca5785a7743c829b6b59925bfdbcfd6" name="open-vm-tools-sdmp" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="09dc7cbe69e7c47f805469f3f56e0c0a5aa696447fc800753bae20605ddb383e" name="openldap2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="f3d54175b9da440b7a3b02d06a99383fe4808ea775996bd6a2aa51951432c8c1" name="openldap2" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="7bd001195005cf9f32467bb885289127a0a1067a27c5d28664a47d27c5db8a20" name="openldap2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="9b7b71834503d22076ed5d7bf274a480a8ccd0a4db2da16053757ab8eeabb856" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="0f1c614aa181513d0d49547f65657fe26429f9080887fe7e073987cb53cc973c" name="openldap2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="8da5b77d22af8a2200bb1f9454528f6674b036fd03ab32d7781e8b52953fdc46" name="openldap2-back-meta" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="4bb302b2f3c58061ded7e79875dccbdd49e6f74c0c8b8b0baa3e78df642182a1" name="openldap2-back-meta" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="6a7173d325cb5ee18661a8d1e84358bb4a3ccca790e8bf2fd285f77e5fca3940" name="openldap2-back-meta" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="4bc19557f989ac8f5b19ac1974c81aa0841ce32e0445d3062ad26e20ed02b228" name="openldap2-back-meta" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="6d539e90208bc8ef0af691eea9c4db205ad2ab300376abbd244695b0387435ee" name="openldap2-back-perl" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="0b46e13ec352347429fe630ed16fcc31fda747172ea9cc1263dbf1abcfa648fa" name="openldap2-back-perl" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="70daa4cab345bfabad395e74e20d022bdaa7432ebe1d2a20efda7788fa89bfd0" name="openldap2-back-perl" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="b4859444ca41fa7338640e2c76fbee94a89174956dc7b7c82d0573cc0886ad0e" name="openldap2-back-perl" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="c9ff5311194e94115d46abf6655089aeecc0a1911324ada0ebae800cdc58107b" name="openldap2-back-sock" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="64f0a3568fed5b01fc6a84f2a45cafad46089e100855116c75028b2c7723790e" name="openldap2-back-sock" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="072cc8b7982232d7750de92ce24cd03a215fb32b633e7857af18a5dfb57f4823" name="openldap2-back-sock" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="8577042245eadb6280e45a4fac57ca514b4cd0affa65c992c38f0b5c19964480" name="openldap2-back-sock" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="74bb744fbbc831ad30a22f60e4b258d11bec97caa3c63b439542ccdb3d163dfb" name="openldap2-back-sql" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="930d82555f798255103a2f8502ded96c124f7212b67ce200ae98f558c6af2e54" name="openldap2-back-sql" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="fdabfcf3ebad49ea0f1d05883b22db98da158eab34c7d824abb3349b1b89e20d" name="openldap2-back-sql" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="c43c443f0ba1093fed12a629f688b7301229b5941d3b8d47a6d2cb25a57cfe57" name="openldap2-back-sql" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="a355707b17de0d496400639661bb51bac1af0eeabc0c58d13d78f4727f783356" name="openldap2-client" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="5cfa41ad4a6e39c8a1b1692c2425ae85357423d879b4ec63d3ba98f48c29b11f" name="openldap2-client" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="5c35314217d0fe17a37865c12ce31ab4e439058e25c8dca5ea16d48aab43285d" name="openldap2-client" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="45e0f979fd5e5d8c3ab6161538acc330f52dfa22c57cd94b49b9733ec5f4ab58" name="openldap2-client" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="c7233d02e850da6f551b422ab59eaaec50fe949c8847688751d0efae5e1275bc" name="openldap2-contrib" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="be29235e0e87e35f63cf6d63317c7193e9b9c5bb6820355c6bf31537ebc33e25" name="openldap2-contrib" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="95de6c611278a2a246545f6840e3eaf6eb7ac10a77a5418433b01ed7a47dc42c" name="openldap2-contrib" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="5eef4edd909ee78bf2648a52b857489e266ff8613977f1a2571edde6d99d6d6b" name="openldap2-contrib" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="110fa348df91c5bdb43c39afed84eed7eedf75289512e8343286a4fb1d17f746" name="openldap2-devel" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="9317afaa42585ee5fa8be80ab6291a3afc5b08bdb8bcddabc7f6dff5948958e3" name="openldap2-devel" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="6ae11af8c380bb3ac0c3d53f4bb284afce73a90f7c88728007d1ec2a3d9613bd" name="openldap2-devel" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="658fc692c80661bae9c93c27eb7a1a02d104807e2d725bb5ecf1bfe011b8ea6e" name="openldap2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="26dbbc321c6f3323e90ff1cb1648d8fbfc3e407fa49dcfbd056be08648482ab4" name="openldap2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="41f65560ec51af3d131c4b874c318cc8e3ee3d40286cb2b4cb03104cef4a9be9" name="openldap2-devel-static" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="46b1686eb8545d0b3b0378f5fb45d0dca2b4df9a6ea694bc0c718bee3820634e" name="openldap2-devel-static" arch="ppc64le">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="e05949a4fd30c0842f4bfac92e4c69d14557e5ccc9d0928bf191d317d6500c26" name="openldap2-devel-static" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="9ea560040de22ed0394cf76eca6ec509fe0016a7a884f012919b998f4d6129da" name="openldap2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="943ff48870394a0c368339c8d00fb60c81bd7710b7cdc52d9e501ab9c2f0850f" name="openldap2-doc" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="a328b9fd43ddaccf6e3b752a376cc9c127850dcbd63041f4fd8a6291933e7630" name="openldap2-ppolicy-check-password" arch="aarch64">
  <version epoch="0" ver="1.2" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="ae000d9981df41a3f456838b5aeffa2b81a54ba2c341466b3e7831c3b58f75f0" name="openldap2-ppolicy-check-password" arch="ppc64le">
  <version epoch="0" ver="1.2" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="9c4afc9b33cee494266d333c1a9b78649fcfc74f8c483b60f8ec8f465649cc43" name="openldap2-ppolicy-check-password" arch="s390x">
  <version epoch="0" ver="1.2" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="6e6185d8a0db29ee71ba7a77439dfa518f59890a3ac00f8798a7224ae30dddd0" name="openldap2-ppolicy-check-password" arch="x86_64">
  <version epoch="0" ver="1.2" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="3c3e54832a146c16fd5e2604d67966ff82eec46c877b6849fe8de30181598439" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="d904036525009739f75bcaaa5599b307910c1044c9b6287c3860b2b90913c10b" name="opensc" arch="ppc64le">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="b1744dcd409c300c85eea6a8ce44cb8daf611a7beaa862b88771ae4df11c0cc9" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="3f0add7bd7aea75b486327bec3b3e201ec24cad0c7d8ee744c13500ef1237c31" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="2869da9911f982948c9b5c4791b7049029655a93ff0598845fb90c1562c81dda" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="72f87db0faf0cf23d9200275524fbb799b3e91e8ef4973e9cec5157e15af863e" name="opensc-32bit" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="7d46e8803b4470fc02c330111a018633233a6eea368ad4ed64fd47b91a19468f" name="openssl-1_0_0" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="26140cfc38d329977c1a7a879a224acef20cc053df3ebe6ea058470715037a48" name="openssl-1_0_0" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="b19e63bacb4477c0e15ed779b65145ad1d69ea1815d38673775bc6d27e5cd8d4" name="openssl-1_0_0" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="762ab8904fc0cbb9a16e722330a7635a71330ad8d7c87deac566b1845c9cca6f" name="openssl-1_0_0" arch="src">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="48d44eb049233acac74ccec0aff1c343f4164e47cf2f2806d192f4bacb3d3f33" name="openssl-1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="e64f8412ed5f83013d890c298df578b1e33db17fbeea52d1b4dfa9be3ba2ab61" name="openssl-1_0_0" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="e8aea7f4eefccedae17207762239911fa0946b6eedfef306517fcd034a84bb8b" name="openssl-1_0_0" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="ade0b5011c24fe0ed9e5cc520ccbed4c489ed9078fdc1c0bb5fa584a4eb10e7f" name="openssl-1_0_0" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="d1b50fd2756f5915acb77e4979ccf40c3dc87ef861b1e4cfb72ef125dc42e1cb" name="openssl-1_0_0" arch="src">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="3a251fd338769d1a6eb4bdc1b9539037222caf0fd5cb6d8589aed1546b731f64" name="openssl-1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="f9e57096ee03e74e4f291110b551815bd0e083f38de3d7b08938a67fe4167c82" name="openssl-1_0_0-cavs" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="274b392b38dd883613207cfcb78cac5c599e59692e841529119bf992192cb061" name="openssl-1_0_0-cavs" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="2f40ed2e42c44bfab055757c9759e71c8cd9622cf6ddaf38442442a8a68f7c68" name="openssl-1_0_0-cavs" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="c2d22360034db9cc8e5dc58c6211df1376f98a78c630b92dfc152500086ce22d" name="openssl-1_0_0-cavs" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="767c493d9b4c4aa6c4f2207decd434a224b85edbefb573c06877acaaa18bdff5" name="openssl-1_0_0-cavs" arch="aarch64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="1d6a46d50ad875e98083c64516f45a8372eb4f43d1e796d91f3da809bb8684a7" name="openssl-1_0_0-cavs" arch="ppc64le">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="b602d70bc1c404c402e0c02e98e9bd639370fd2c0d8a300b0385da803767f333" name="openssl-1_0_0-cavs" arch="s390x">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="1a8a3001627f2e5b8d783032e2014f6b26bb9e039a42e3b51e3a17baf46714b4" name="openssl-1_0_0-cavs" arch="x86_64">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="4ce224bc0ecad174500d4ccdb52fc742544cb85b424f1f4a5e7074597fddf9dc" name="openssl-1_0_0-doc" arch="noarch">
  <version epoch="0" ver="1.0.2p" rel="150000.3.76.1"/>
  <changelog author="pmonreal@suse.com" date="1602676800">- Initialize dh-&gt;nid to NID_undef in DH_new_method() [bsc#1177673]
- Fix openQA test failure in apache_ssl in fips mode [bsc#1177793]
- update openssl-DH.patch</changelog>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="3cccb0a759111c5afef8e973c3f330ac6fd3d8b800f239536b426b10bd3a9e70" name="openssl-1_0_0-doc" arch="noarch">
  <version epoch="0" ver="1.0.2p" rel="150000.3.79.1"/>
  <changelog author="vcizek@suse.com" date="1607428800">- OpenSSL Security Advisory [08 December 2020]
- Fix EDIPARTYNAME NULL pointer dereference
  (CVE-2020-1971, bsc#1179491)
  * add openssl-CVE-2020-1971.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1614772800">- Security fixes:
  * Integer overflow in CipherUpdate: Incorrect SSLv2 rollback
    protection [bsc#1182333, CVE-2021-23840]
  * Null pointer deref in X509_issuer_and_serial_hash()
    [bsc#1182331, CVE-2021-23841]
- Add openssl-CVE-2021-23840.patch openssl-CVE-2021-23841.patch</changelog>
  <changelog author="jsikes@suse.com" date="1620388800">- Add RFC3526 and RFC7919 groups to 'openssl genpkey' so that it
  can output FIPS-appropriate parameters.
  * bsc#1180995
  * openssl-add_rfc3526_rfc7919.patch</changelog>
  <changelog author="jsikes@suse.com" date="1622548800">- link binaries as position independent executables
  * openssl-1.0.0-pic-pie.patch
  * bsc#1186495</changelog>
  <changelog author="jsikes@suse.com" date="1625400000">- Change genpkey command options for bsc#1180995 to be consistent with upstream.
  * Replaced openssl-add_rfc3526_rfc7919.patch
  * Genpkey: "-pkeyopt dh_param:" can now choose modp_* (rfc3526) and
    ffdhe* (rfc7919) groups. Example:
    $ openssl genpkey -genparam -algorithm DH -pkeyopt dh_param:modp_4096</changelog>
  <changelog author="jsikes@suse.com" date="1629374400">- The function X509_CERT_AUX_print() has a bug which may cause a read buffer overrun
  when printing certificate details. A malicious actor could construct a
  certificate to deliberately hit this bug, which may result in a crash of the
  application (causing a Denial of Service attack).
  * CVE-2021-3712
  * bsc#1189521
  * Add CVE-2021-3712-Fix-read-buffer-overrun-in-X509_CERT_AUX_print.patch</changelog>
  <changelog author="jsikes@suse.com" date="1630238400">- Other OpenSSL functions that print ASN.1 data have been found to assume that
  the ASN1_STRING byte array will be NUL terminated, even though this is not
  guaranteed for strings that have been directly constructed. Where an application
  requests an ASN.1 structure to be printed, and where that ASN.1 structure
  contains ASN1_STRINGs that have been directly constructed by the application
  without NUL terminating the "data" field, then a read buffer overrun can occur.
  * CVE-2021-3712 continued
  * bsc#1189521
  * Add CVE-2021-3712-other-ASN1_STRING-issues.patch
  * Sourced from openssl-CVE-2021-3712.tar.bz2 posted on bsc-1189521
    2021-08-24 00:47 PDT by Marcus Meissner</changelog>
  <changelog author="jsikes@suse.com" date="1632657600">- bsc#1190885
  * OpenSSL: parameters by name ffdheXXXX and modp_XXXX sometimes result in "not found"
  * modified openssl-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1646827200">- Security Fix: [bsc#1196877, CVE-2022-0778]
  * Infinite loop in BN_mod_sqrt() reachable when parsing certificates
  * Add openssl-CVE-2022-0778.patch</changelog>
  <changelog author="jsikes@suse.com" date="1653912000">- Security fix: [bsc#1199166, CVE-2022-1292]
  * Added: openssl-CVE-2022-1292.patch
  * properly sanitise shell metacharacters in c_rehash script.</changelog>
  <changelog author="jsikes@suse.com" date="1654776000">- Fixed error in openssl-CVE-2022-1292.patch resulting in misnamed
  variable.</changelog>
  <changelog author="jsikes@suse.com" date="1655467200">- Added	openssl-1_0_0-Fix-file-operations-in-c_rehash.patch
  * bsc#1200550
  * CVE-2022-2068
  * Fixed more shell code injection issues in c_rehash</changelog>
  <changelog author="jsikes@suse.com" date="1664020800">- Added openssl-1_0_0-paramgen-default_to_rfc7919.patch
  * bsc#1180995
  * Default to RFC7919 groups when generating ECDH parameters
    using 'genpkey' or 'dhparam' in FIPS mode.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672660800">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675166400">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch
- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch
  - openssl-Groundwork-for-a-perl-based-testing-framework.patch
  - openssl-Add-recipes-for-the-larger-protocols.patch
- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1676635200">- Fix DH key generation in FIPS mode, add support for constant BN for
  DH parameters [bsc#1202062]
  * Add patch: openssl-fips_fix_DH_key_generation.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Reworked openssl-CVE-2022-4304.patch
  * Refreshed openssl-CVE-2023-0286.patch</changelog>
</package>
<package pkgid="669ad31dc2bed43765bbb18982f445eeff8c5a4dcd092f1f1d8a679c841acd3c" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="062b60e37bcf34252e41de6b2b38908ba0c3144ee12a0d50b8a66190e588a612" name="openssl-1_1" arch="ppc64le">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="0a981f90fbb7e22d0a4eb422e66af8edb0e73c5edff80dc5a277c677c32c2a3a" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="418acaf53d8057ffafe1b100cea938148b77c48a23e10fb219cd1b9082644429" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="8c8bcf5f8a39a2cbdeaabfc9c7e52983da470318ed6f3ab9836ad80b9a3e0088" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="f9b7fabd6be04d116d9ecdb4c6c99eae2334d04490f887251862e8e681b240c3" name="openssl-1_1-doc" arch="noarch">
  <version epoch="0" ver="1.1.1l" rel="150500.17.6.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1669982400">- POWER10 performance enhancements for cryptography [jsc#PED-512]
  * openssl-1_1-AES-GCM-performance-optimzation-with-stitched-method.patch
  * openssl-1_1-Fixed-counter-overflow.patch
  * openssl-1_1-chacha20-performance-optimizations-for-ppc64le-with-.patch
  * openssl-1_1-Fixed-conditional-statement-testing-64-and-256-bytes.patch
  * openssl-1_1-Fix-AES-GCM-on-Power-8-CPUs.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">- FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="f7101a010dd2afa71c3f49506a6c4a65d4095b193fe01aa4c2f4b2ce95f0e8d0" name="openssl-3" arch="aarch64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="da8ac843f4853848c1076656054212070a7760db4f284df3fab8cf8e2a32d6e7" name="openssl-3" arch="ppc64le">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="345a534d8396c874c4985967e51676b47d17b0c39ad4eb04d48c0d1cf4860fb9" name="openssl-3" arch="s390x">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="0aa98a927d5c40936f45e21eef778ef2cc9da85e0a3055a74bd54f53e1eec822" name="openssl-3" arch="src">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="6dbbd9ce4b63bc02e5fae9f3bb8986d5a89bcd7a7ea5f617e53facc6b9461fbf" name="openssl-3" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="5b8c55ae1e5db42783fdc7a6888b2d3f02d2c8f3e22ffa907991248738d3687c" name="openssl-3-doc" arch="noarch">
  <version epoch="0" ver="3.0.8" rel="150500.5.3.1"/>
  <changelog author="simonf.lees@suse.com" date="1643371200">- Remove /etc/pki/CA from the [jsc#SLE-17856, jsc#SLE-19044]
  openssl-Override-default-paths-for-the-CA-directory-tree.patch
- Remove unused patches</changelog>
  <changelog author="danilo.spinella@suse.com" date="1643716800">- Fix conflict with openssl and libressl</changelog>
  <changelog author="pmonreal@suse.com" date="1645531200">- Keep CA_default and tsa_config1 default paths in openssl3.cnf
- Rebase patches:
  * openssl-Override-default-paths-for-the-CA-directory-tree.patch
  * openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647345600">- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
  * Rebase openssl-use-versioned-config.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647604800">- Add crypto-policies support.
  * Fix some tests that couldn't find the openssl3.cnf location
  * Rebase patch:
    openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647691200">- Enable zlib compression support [bsc#1195149]</changelog>
  <changelog author="jsikes@suse.com" date="1654171200">- Added openssl-update_expired_certificates.patch
  * Openssl failed tests because of expired certificates.
  * bsc#1185637</changelog>
  <changelog author="pmonreal@suse.com" date="1658145600">- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.</changelog>
  <changelog author="pmonreal@suse.com" date="1658145601">- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.</changelog>
  <changelog author="pmonreal@suse.com" date="1658404800">- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1663156800">- Do not make libopenssl3-32bit obsolete libopenssl1_1-32bit.
  They are independent libraries and can be installed simultaneously.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304000">- Update to 3.0.6: [bsc#1204226, CVE-2022-3358]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms</changelog>
  <changelog author="otto.hollmann@suse.com" date="1667304001">- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Update to version 3.0.7 in SLE15-SP5 [jsc#PED-544]
- Remove patches (already present in 3.0.7):
  * openssl-3-CVE-2022-1343.patch
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672920000">- Update openssl.keyring:
  pub   rsa4096 2021-07-16 [SC] [expires: 2031-07-14]
    A21FAB74B0088AA361152586B8EF1A6BA9DA2D5C
  uid           Tomáš Mráz &lt;tm@t8m.info&gt;
  uid           Tomáš Mráz &lt;tomas@arleto.cz&gt;
  uid           Tomáš Mráz &lt;tomas@openssl.org&gt;</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675771200">- Update to version 3.0.8 in SLE15-SP5 [jsc#PED-544]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
  * Rebased openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * Update openssl.keyring with key
    7953 AC1F BC3D C8B3 B292 393E D5E9 E43F 7DF9 EE8C (Richard Levitte)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="a79d676b4b22aa16450249d13832e14a20098b98608f8e87adcbd58b9254c4cf" name="openvswitch" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="49ad94a82f1d9861327e84f9b25fcd25609b2e5acdd3caa6719b6c77bc6a1db0" name="openvswitch" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a7cd2a4eb464551a2e2fd36c2aa11e317866c126a9211c6ed2b2d78cfac781e4" name="openvswitch" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f7c589b93945d6eac5b3ab6b7871783ada67d0568f8c52d8bbc77feb55292bfc" name="openvswitch" arch="src">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a4a2f3712d9b1eb1dc900b9c7d5d0e55dc8fdcfc72d753c41130c78caa5928ca" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="0847a2b26ed1de9c7053ef7dfd655cc572ec50f6c7fce40a1fe3dd512ff738ff" name="openvswitch-devel" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="227fc894e63920e6433f2168afee9c8fa66e03847cb2d9ef8648f3403ac6fe8f" name="openvswitch-devel" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="b5e0749db74d33df284163952598756c0fe816a967937c552e72e21f1cf62f0c" name="openvswitch-devel" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="01df387c7b9d2b3fdc83bd3525914328771d75c49abaca380254e37fc50ae8ad" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="0cbf187cb64a702fb3001c008ccaefa6203a083fadccd6c5f2cfc98448004235" name="openvswitch-doc" arch="noarch">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="d0d850444bfe694579e2f0f373778224247f96fb0212e51bc295405b9feaabca" name="openvswitch-ipsec" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="806dae2e6a9b5f830259fb9c1549997ed325ef79773ae72b3530d26d24792d93" name="openvswitch-ipsec" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f180051955fb635dce3e978243a55cb081be835d04fb9aa9f0089a75715ad132" name="openvswitch-ipsec" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="ce163cf7fca33371a8b8ce382ad0f8a65af0335c1895c15e671715a19caeaf70" name="openvswitch-ipsec" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="3f7e3e8296200a0fc67435ae6ecb7b7fcff032ecc7244338c502af209c40d23f" name="openvswitch-pki" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4fdcda5453d8c8065861f51c13dc1af4e59d68defefbc39b0f94596adfb71c5f" name="openvswitch-pki" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="16229f0e023f8e78ea563ea43686a1cfe8537c43cae74449f4c2e1557b8d41ab" name="openvswitch-pki" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="69163f4ba783759e66384d676bff03d901a89f204a9d5420e42630fed0153a9a" name="openvswitch-pki" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="7d3cc0ae542db3014599c07258c273e64e4c67ac797af5708b8e425e9fe638bf" name="openvswitch-test" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="13bee38fca28a8db8c278c1ef1e3cb8742250124b396fd86c4bf090ea4e459ee" name="openvswitch-test" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a6df3361c2a1244cf22185436d50bd58b90c2d4a1304e7ef5949ecae6e2f3fb7" name="openvswitch-test" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="e249f1c01a814a74236e8d65313b6739d0fd77e01626cf7da85832c0c5d44826" name="openvswitch-test" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="b4caf61afe28ebb04ceb74e765cdbb2a9d7fba06913c703f643b6c3750e54cd3" name="openvswitch-vtep" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="d38a442e899599647599d92fafaea67fc1e5c632736d683041a5609f4d21c438" name="openvswitch-vtep" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="0853329549457a9317c487624593c39752cd69ec847de024dacfe1f690d37846" name="openvswitch-vtep" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="08d2fe7e1c281a22604f5a79a512ab55f316a850fd300afe328e8a016e26528f" name="openvswitch-vtep" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="ec89830b27b4e7feb9587909fab0e7227de761b2ca90c94fe2e4de4d0a3d33f2" name="openvswitch3" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="b1489973547ef83ab1ab2851d2aef39c8d957e9571147037e3769ddd4e741a69" name="openvswitch3" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="09bbf47a26b1776d41d2bf0d40b625e0a2ad054c2496f08e12f2f5ce335b3dd9" name="openvswitch3" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f7d9bb2969c40c30f5f5ee00af317a7e5d82a853766f4711f21a212c0332a27c" name="openvswitch3" arch="src">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="997a7b4db6c4fa9fd8e98bd3d7985944c1361530754ad58a749deffa94489653" name="openvswitch3" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="c9b852569819f9e977c1698dce134c9fad55b967a605b1688765931d369d1b47" name="openvswitch3-devel" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="c0b842dd8b6fe22bfabcd62f6acdff280e766f59f491e480ba21aefd64b7d104" name="openvswitch3-devel" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="69d31758259a60153a4aa674bdfbfb4035800e4e34690eb66d757670ce8ae01f" name="openvswitch3-devel" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="d5dc3f70db50582728186984caa905704707b48a445b0ba31a7d259b137c741d" name="openvswitch3-devel" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="085b73c43899d6505ed50280375e9146017f0e54456576f1bef22d547ce87ea3" name="openvswitch3-doc" arch="noarch">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="42802b3673a7fb061efbd72cf1129143c7bcef6b242938b671bca49dd106b577" name="openvswitch3-ipsec" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="9b7fdd0ae77205b3d737ca8a49b516fb93608c8c8ebff91d3ce888cfcd859a17" name="openvswitch3-ipsec" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="bbcf4a28202ea350db9bc7d6981cab359a96f04ce3e7c81c7f8f318aa063e523" name="openvswitch3-ipsec" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="43b256e305ee44f761be3e692bd9e01c3d59ee4e7fb4075fec810e47128e9451" name="openvswitch3-ipsec" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="8d092ff662f08a52ff7656b53b1f6e1685d3c9df561e2699c4ae44474f17c0f2" name="openvswitch3-pki" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="582a996c5f0718cad951f7bf5c539e6933861030ba9f3a0d2c746033d01f9acb" name="openvswitch3-pki" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="7330c526771266396904d3de52c9938a3d9a26848157992778a861df1040f399" name="openvswitch3-pki" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="9f5696b06c2c740319c1f7d623eb2f19b015846e73a7af4c301f2ec84f53fe07" name="openvswitch3-pki" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="e27b5a8708dfbcd2b3387f5262939934d47a2d10e1ca969a48b5dd82f722349c" name="openvswitch3-test" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="1e69ee89214beeb8e1c6f096509412a30711d58522dd66d7371a3daf7df0936c" name="openvswitch3-test" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="3d6ada3308613bb72c3135f325d19497bf154805adde189949291220b8ff135c" name="openvswitch3-test" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="c5c81983948ec18772b531938a7a0708c07b6200d9babd63cc2421ec1d91db24" name="openvswitch3-test" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="3b6a6333f3595e426fea7a03bb5ba1187640386d6a63a69c2b965d9d0820c808" name="openvswitch3-vtep" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="c05f1bdc00b2e7eb8e0d70ffc95a1e5ceecfda24168d6a76767f1aafe0b5b846" name="openvswitch3-vtep" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="ce0652b82839ef163d95c45a29f1ab84d90dd1627990a9fa786f489ff036d021" name="openvswitch3-vtep" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="6656d1f27fd3f3885ea3badeb38a0f2c48a2f7a08302ff7fda616e1d1a87af58" name="openvswitch3-vtep" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4807fc9ec8c481a729af3c6e7f109d292bb48098dcba4addfd6bd877e58ef079" name="ovn" arch="aarch64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="8f3956a08190d7e0eb70dc9f256f7b371dec18afc472b95d34c523de32bda7f7" name="ovn" arch="ppc64le">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f11e7267b441d2fc76813bcd7aeadcf705345e85d137a9c4c324bb426047eb8b" name="ovn" arch="s390x">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="69f79f77ed87f98f4a0895acd75cfca6c2df4d9ec0e72e627d4581930972c5f5" name="ovn" arch="x86_64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4f6334c68e80a176b6b78ed4ecbb69d35d24e413206807a48b6d52a07c621427" name="ovn-central" arch="aarch64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="7a26a6547a8a3424203f23aad24d1e3c27a49f16acd205304d33088b7cfd03fe" name="ovn-central" arch="ppc64le">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="6055ff386031c8f896960e3bd4ea61971e79cab5e348ae25520d8282487ee22e" name="ovn-central" arch="s390x">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a7b9211f45ad353bfb0488425663e14bf88e06b881a4b9d3fed1cfb0c88be27a" name="ovn-central" arch="x86_64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a856aa8f0e4de489a2bf794c9f655da78cfff666aa1bad64bbfc9422f14165bd" name="ovn-devel" arch="aarch64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4f22ffb9d1dd1a507e31688874a2cdf1623bebe631dc2869cb9632132a37a566" name="ovn-devel" arch="ppc64le">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="34c346a3f03d5ff8e4abfed322d1cd9fa71709c21fc2f2d04d6f54a1654fa198" name="ovn-devel" arch="s390x">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="3797f5451846ab751d6c87c02af4926d49c2c53a5efe7e388467cdf3620ee742" name="ovn-devel" arch="x86_64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="354c07480ccb0d86d1bce168ef3911c8d7588b923f081ea221dd270914199893" name="ovn-doc" arch="noarch">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="47f4ba36ef82c909675fd30d0d80ebfc500d87a320b8800884263cee64e2eaff" name="ovn-docker" arch="aarch64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="33aa3fcc4e1f4b66dcecfbaa94dc54e298da22b03fb0f8eadd96251042c444c1" name="ovn-docker" arch="ppc64le">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="60493566b8542be11c2e3e3a6a708fe13efef766777ab20da548a9ac01253391" name="ovn-docker" arch="s390x">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4885ae9a63e84a367058f420a5fd87e40a070f963e0595ce48bab1dad9ec7e6a" name="ovn-docker" arch="x86_64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="6eb77976a7376a434ddbdec32bc02aeba4608d52e974724157a3788228d1a6ec" name="ovn-host" arch="aarch64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4129d6f9bb98949c7471bb68afbbc5505bfa9752890bc90762749be77ebf533b" name="ovn-host" arch="ppc64le">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="571f382a71531ce2ae60282e66ce4a3f976f5391b6cb90e02dc60c709668d75e" name="ovn-host" arch="s390x">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="020e9529da2a2ddc08482c95dffb45229d4d2862f5779fb76ce0f4f7e8c11872" name="ovn-host" arch="x86_64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="72d7bbca97abbd526b98122bfde69a1bab9fb20adf56d1635427d12b8ae879c9" name="ovn-vtep" arch="aarch64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="7e637cd30d34d945bd9052851d53fd8ac38df5dcddda1d898bbd83bcdee1565d" name="ovn-vtep" arch="ppc64le">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="dbc4f11c8fe4c625faeae5f60b1b8bd33d8620550f40f3b2e8d343b5bd258287" name="ovn-vtep" arch="s390x">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="c4eb696d65117daab29cb202eb290dd746d1b80feeba93002b84b9b8a7b79fbe" name="ovn-vtep" arch="x86_64">
  <version epoch="0" ver="20.06.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a8f112fb74f92050cf3eb7e37c51bd417db80632d744573299d54c5d16cbcd5f" name="ovn3" arch="aarch64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="237783eb48d85abf403c7ce3aeedd112d29726acd8508b75d297c42f838721d5" name="ovn3" arch="ppc64le">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4fc581192ee6786ae44f1d9185c115f8a6c127b84c47ca2e39e73c75f85294b2" name="ovn3" arch="s390x">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a9b0f3cf926a1eb9baeed2063d153b1167733fa3205c689fb9649201bb3c3e97" name="ovn3" arch="x86_64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="91bdaf9428c1dcca7ac50a680cd8c854fea3460fb2b9f1c59edb8662439a429c" name="ovn3-central" arch="aarch64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="3b8f3b0ccb8b43612ec1cdd9bc784995a3e47c522b6ef2f579178b4dd9c51779" name="ovn3-central" arch="ppc64le">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="87a0e4fb8bcdd729b12ffb60315143d9667a742631947672ec13840d85b0c1e3" name="ovn3-central" arch="s390x">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="b3b2fe96ba202cd9a0c4faedad5fab43c403968612eb56b06d63460134bd99ba" name="ovn3-central" arch="x86_64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="98bd7a88d117977a3c9a9f133da383f8aa434558a8f5209ec07809eb82f2b51a" name="ovn3-devel" arch="aarch64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="dfc01a59d8b68c0a4528e7d6e62dbe461162728b6555ee6e5fcac0943369e49e" name="ovn3-devel" arch="ppc64le">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="8757024816a16a62c823230e7144bd4c5f4e2c50b4ea07036bc2ef18d189be90" name="ovn3-devel" arch="s390x">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="cafc97f0ec8625be760cb97086439037fd37dbbbf9a1735b04040be64b8d3616" name="ovn3-devel" arch="x86_64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="df5fe8cc4e70cd93002797808c27924dbb3570b667d9c23a8c24b5b6ea3326f8" name="ovn3-doc" arch="noarch">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="ce9262c96ca10acaae7bf515683ca51531a92454f8a868742541bd8a8b556260" name="ovn3-docker" arch="aarch64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="6cb7823836c8570ff573642cd38a965686fd011ba7023effdd5fa31a9c5d7c1a" name="ovn3-docker" arch="ppc64le">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="6af3430b433b448eeeaff201ce9a53c9d67dafeecd8c5970b97a7f1ba7720e81" name="ovn3-docker" arch="s390x">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="03a2a62dd263997103faffd9bc50180b2628f5c6df4d2d573a318446caff235e" name="ovn3-docker" arch="x86_64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="a431d0fd3dac22578924d8f5a8cd38ddf659eaecde50a7fcec24d7260c9fb902" name="ovn3-host" arch="aarch64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f46da7a6e7d0dd9442c2400b2694dcd3614bcb2d134cbd0fc7a41fabe7e9506d" name="ovn3-host" arch="ppc64le">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="0b55ab53370b99c3826f2fbd4d572cfab5f4adc5f81363dff64b84c47f2b3f2f" name="ovn3-host" arch="s390x">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="d0313ff43ff23ef9e7139052c6a7013417c4200513e12aff5cdb133d9c171f67" name="ovn3-host" arch="x86_64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="b81fa5be8b34573f2eacd1b7b844eec4bbf1e008ac29bae5f7447ec09bfa56be" name="ovn3-vtep" arch="aarch64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="0a28a9619eb74c22fb181f09c48a0781493ef119dde60dc47a7bff1cae971bf5" name="ovn3-vtep" arch="ppc64le">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="8f7e1828d1b2160ca090ee3b8a3c3e1859e97912a7ad4b0a9ea17ed29d6d8b25" name="ovn3-vtep" arch="s390x">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4e5470f2ecfdfbf8b0133a7f0fad8fe9de1a9a38cf1560cbc61a4b77c9d064d4" name="ovn3-vtep" arch="x86_64">
  <version epoch="0" ver="23.03.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="7a4e7d014f8f1d62c4d0d14d4e504a47be4b0f667587a278ee14e8e5a0440266" name="pam_snapper" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="f3527aed1304e046a16bead699041918b1269e2524509af33b14d3dc44eb3038" name="pam_snapper" arch="ppc64le">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="f7b59c4126d5baec520ed1aac7910f0b5ee5a6ad86c62786b6a730bd8a5bef75" name="pam_snapper" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="94235a603933c376c9312e6ff21f8271ce0e752d5741d0f1c26ecff29f470362" name="pam_snapper" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="256f8435139bb91b7652125f064e11310a2b0ce064c3a248e394f98f2fae6863" name="perl-PerlMagick" arch="aarch64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="f8d923a87f03b6b7992268f34b82bb4e4044016c8d46b28460ae4187f49b8f20" name="perl-PerlMagick" arch="ppc64le">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="11bb25a31f820bf982e484e1e265a3a2761daae58940e36f7e933931bd602e89" name="perl-PerlMagick" arch="s390x">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="5c02d3c00d545e26dab512a8ce935fb829d2537c71d4a2af5f86233ea5e0291a" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.1.0.9" rel="150400.6.21.1"/>
  <changelog author="pgajdos@suse.com" date="1620302400">- version update to 7.0.11.11
  * FL32 no longer returns scambled results (reference
    https://github.com/ImageMagick/ImageMagick/issues/3614).
  * Ashlar pseudo-image format no longer crops labels in last row of tiles by
    default (reference https://github.com/ImageMagick/ImageMagick/issues/3618).
  * Optimize CompareImageBounds().
  * Check image is not NULL before dereferencing.
  * eliminate uninitialized value
  * Differences in computing linear gray (reference
    https://github.com/ImageMagick/ImageMagick/issues/3571).
  * added support for pdf:author, pdf:producer and pdf:title when writing a
    PDF file.</changelog>
  <changelog author="pgajdos@suse.com" date="1620648000">- version update to 7.0.11.12
  * The HEIC depth image will now only be read when the define heic:depth-image
    is true.
  * -layers optimize no longer produces broken output (reference
    https://github.com/ImageMagick/ImageMagick/issues/3520).</changelog>
  <changelog author="pgajdos@suse.com" date="1621944000">- version update to 7.0.11.13
  * Fixed reading and writing the XMP chunk in a WebP image (reference
    https://github.com/ImageMagick/ImageMagick/discussions/3617).
  * label and caption sanity check is too conservative.</changelog>
  <changelog author="pgajdos@suse.com" date="1624276800">- version update to 7.1.0.0 [bsc#1187501]
  * SVG no longer hangs when handling class in &lt;defs&gt; (reference
    https://github.com/ImageMagick/ImageMagick/issues/3818).
  * Bump minor version (reference
    https://github.com/ImageMagick/ImageMagick/issues/3768)
  * Raise exception for invalid compose:args geometry (reference
    https://github.com/ImageMagick/ImageMagick/issues/3765).
  * Added support for reading and writing 16-bit jxl images.
- modified sources
  % baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1627300800">- update to 7.1.0.4:
  * trim no longer returns an empty image on 1-pixel width input (reference
    https://github.com/ImageMagick/ImageMagick/issues/3896).
  * remove virtual canvas offset from difference image.
  * Added option to set the pixel format option of ffmpeg when reading a
    video file with -define video:pixel-format=&lt;value&gt;.
  * system() is not supported under IOS.
  * accelerate subimage-search with FFT's (contributed by Fred).
  * malloc() corruption fix
  * Added option to set the vsync option of ffmpeg when reading or writing a
    video file with -define video:vsync=&lt;value&gt;.</changelog>
  <changelog author="pgajdos@suse.com" date="1632139200">- version update to 7.1.0.8
  * Check for `null` in InvokeDelegate() (reference
    https://github.com/ImageMagick/ImageMagick/issues/4225).
  * Fixed incorrect check when module is used as the domain in policy.xml
    that could allow the use of a disabled module. (reference
    https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qvhr-jj4p-j2qr).
  * Prevent color reduction merging into one color (reference
    https://github.com/ImageMagick/ImageMagick/issues/4059)
  * Tweak the bilevel image type (reference
    https://github.com/ImageMagick/ImageMagick/issues/4121).
  * Converting from LAB to RGB leads to wrong colors (reference
    https://github.com/ImageMagick/ImageMagick/issues/4105).
  * Added option (-dng:read-thumbnail=true) to read the thumbnail of a raw
    Image and store it as a profile called dng:thumbnail.
  * Heap-based buffer overflow in TIFF coder (alert from Hunter Mitchell).
  * Grayscale image write optimization.</changelog>
  <changelog author="pgajdos@suse.com" date="1633348800">- version update to 7.1.0.9:
  * Squash a dump truck load of VisualStudio compiler warnings.
  * improved algorithm for automatic calculation of word breaks and pointsize
    for caption and labels.
  * improve wrapping between words and within words (reference
    https://github.com/ImageMagick/ImageMagick/discussions/4227).
- added patches
  disable Contrast test for i586 on SLE 15
  + ImageMagick-filter.t-disable-Contrast.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1633348801">- previous version updates fixed also:
  CVE-2018-10805,CVE-2018-11624,CVE-2018-11625,CVE-2018-12599,CVE-2018-12600,
  CVE-2018-14434,CVE-2018-14435,CVE-2018-14436,CVE-2018-14437,CVE-2018-16323,
  CVE-2018-16328,CVE-2018-16329,CVE-2018-16412,CVE-2018-16413,CVE-2018-16640,
  CVE-2018-16641,CVE-2018-16642,CVE-2018-16643,CVE-2018-16644,CVE-2018-16645,
  CVE-2018-17966,CVE-2018-18024,CVE-2018-18544,CVE-2018-20467,CVE-2019-10650,
  CVE-2019-11007,CVE-2019-11008,CVE-2019-11470,CVE-2019-11472,CVE-2019-11505,
  CVE-2019-11506,CVE-2019-11597,CVE-2019-11598,CVE-2019-12974,CVE-2019-12975,
  CVE-2019-12976,CVE-2019-12977,CVE-2019-12978,CVE-2019-12979,CVE-2019-13133,
  CVE-2019-13134,CVE-2019-13135,CVE-2019-13136,CVE-2019-13137,CVE-2019-13295,
  CVE-2019-13296,CVE-2019-13297,CVE-2019-13298,CVE-2019-13299,CVE-2019-13300,
  CVE-2019-13301,CVE-2019-13302,CVE-2019-13303,CVE-2019-13304,CVE-2019-13305,
  CVE-2019-13306,CVE-2019-13307,CVE-2019-13308,CVE-2019-13309,CVE-2019-13310,
  CVE-2019-13311,CVE-2019-13391,CVE-2019-13454,CVE-2019-14980,CVE-2019-14981,
  CVE-2019-15139,CVE-2019-15140,CVE-2019-15141,CVE-2019-16708,CVE-2019-16709,
  CVE-2019-16710,CVE-2019-16711,CVE-2019-16712,CVE-2019-16713,CVE-2019-19948,
  CVE-2019-19949,CVE-2019-7175,CVE-2019-7395,CVE-2019-7396,CVE-2019-7397,
  CVE-2019-7398,CVE-2019-9956,CVE-2020-19667,CVE-2020-25664,CVE-2020-25665,
  CVE-2020-25666,CVE-2020-25674,CVE-2020-25675,CVE-2020-25676,CVE-2020-27560,
  CVE-2020-27750,CVE-2020-27751,CVE-2020-27752,CVE-2020-27753,CVE-2020-27754,
  CVE-2020-27755,CVE-2020-27756,CVE-2020-27757,CVE-2020-27758,CVE-2020-27759,
  CVE-2020-27760,CVE-2020-27761,CVE-2020-27762,CVE-2020-27763,CVE-2020-27764,
  CVE-2020-27765,CVE-2020-27766,CVE-2020-27767,CVE-2020-27768,CVE-2020-27769,
  CVE-2020-27770,CVE-2020-27771,CVE-2020-27772,CVE-2020-27773,CVE-2020-27774,
  CVE-2020-27775,CVE-2020-27776,CVE-2020-29599,CVE-2021-20241,CVE-2021-20311,
  CVE-2021-20312,CVE-2021-20313,CVE-2021-20241,CVE-2021-20243,CVE-2021-20244,
  CVE-2021-20246
  (bsc#1094741,bsc#1094742,bsc#1094745,bsc#1095812,bsc#1096200,bsc#1096203,
  bsc#1098545,bsc#1098546,bsc#1102003,bsc#1102004,bsc#1102005,bsc#1102007,
  bsc#1106254,bsc#1106855,bsc#1106857,bsc#1106858,bsc#1106989,bsc#1106996,
  bsc#1107604,bsc#1107609,bsc#1107612,bsc#1107616,bsc#1107618,bsc#1107619,
  bsc#1110746,bsc#1111069,bsc#1111072,bsc#1113064,bsc#1120381,bsc#1124365,
  bsc#1124366,bsc#1124367,bsc#1124368,bsc#1128649,bsc#1130330,bsc#1131317,
  bsc#1132054,bsc#1132060,bsc#1133204,bsc#1133205,bsc#1133498,bsc#1133501,
  bsc#1136732,bsc#1138464,bsc#1139884,bsc#1139885,bsc#1139886,bsc#1140100,
  bsc#1140102,bsc#1140103,bsc#1140104,bsc#1140105,bsc#1140106,bsc#1140110,
  bsc#1140111,bsc#1140501,bsc#1140513,bsc#1140520,bsc#1140534,bsc#1140538,
  bsc#1140543,bsc#1140545,bsc#1140547,bsc#1140549,bsc#1140552,bsc#1140554,
  bsc#1140664,bsc#1140665,bsc#1140666,bsc#1140667,bsc#1140668,bsc#1140669,
  bsc#1140673,bsc#1141171,bsc#1146065,bsc#1146068,bsc#1146211,bsc#1146212,
  bsc#1146213,bsc#1151781,bsc#1151782,bsc#1151783,bsc#1151784,bsc#1151785,
  bsc#1151786,bsc#1159861,bsc#1160369,bsc#1161194,bsc#1178067,bsc#1179103,
  bsc#1179202,bsc#1179208,bsc#1179212,bsc#1179221,bsc#1179223,bsc#1179240,
  bsc#1179244,bsc#1179260,bsc#1179268,bsc#1179269,bsc#1179276,bsc#1179278,
  bsc#1179281,bsc#1179285,bsc#1179311,bsc#1179312,bsc#1179313,bsc#1179315,
  bsc#1179317,bsc#1179321,bsc#1179322,bsc#1179327,bsc#1179333,bsc#1179336,
  bsc#1179338,bsc#1179339,bsc#1179343,bsc#1179345,bsc#1179346,bsc#1179347,
  bsc#1179361,bsc#1179362,bsc#1179397,bsc#1179753,bsc#1182335,bsc#1184624,
  bsc#1184626,bsc#1184627,bsc#1184628,bsc#1182335,bsc#1182336,bsc#1182325,
  bsc#1182337)</changelog>
  <changelog author="pgajdos@suse.com" date="1644235200">- fix https://github.com/ImageMagick/ImageMagick/issues/4790 [bsc#1195321]
- added patches
  https://github.com/ImageMagick/ImageMagick/commit/b51707c08f3dee192d464d38fc507c86051e62e6
  + ImageMagick-gradient-black-white.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1644321600">- security update
- added patches
  fix CVE-2022-0284 [bsc#1195563], Heap buffer overread in GetPixelAlpha()
  in MagickCore/pixel-accessor.h
  + ImageMagick-CVE-2022-0284.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645704000">- security update
- added patches
  fix CVE-2021-4219 [bsc#1196337], denial of service in MagicCore/draw.c via crafted SVG file
  + ImageMagick-CVE-2021-4219.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1650628800">- security update
- added patches
  fix CVE-2022-1114 [bsc#1198700], heap-use-after-free in RelinquishDCMInfo of dcm.c
  + ImageMagick-CVE-2022-1114.patch
  fix CVE-2022-1115 [bsc#1198701], heap-buffer-overflow in PushShortPixel of quantum-private.h
  + ImageMagick-CVE-2022-1115.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655121600">- security update
- added patches
  fix CVE-2022-32545 [bsc#1200388], outside the range of representable values of type 'unsigned char' at coders/psd.c
  + ImageMagick-CVE-2022-32545.patch
  fix CVE-2022-32546 [bsc#1200389], outside the range of representable values of type 'unsigned long' at coders/pcl.c
  + ImageMagick-CVE-2022-32546.patch
  fix CVE-2022-32547 [bsc#1200387], load of misaligned address at MagickCore/property.c
  + ImageMagick-CVE-2022-32547.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1660910400">- security update
- added patches
  fix CVE-2022-28463 [bsc#1199350], ImageMagick 7.1.0-27 is vulnerable to Buffer Overflow.
  + ImageMagick-CVE-2022-28463.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1661169600">- security update
- added patches
  fix CVE-2022-2719 [bsc#1202250], DoS due to attempted writing of NULL image list
  + ImageMagick-CVE-2022-2719.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1663588800">- security update
- added patches
  fix CVE-2022-3213 [bsc#1203450], heap buffer overflow while processing a malformed TIFF file
  + ImageMagick-CVE-2022-3213.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1675944000">- security update
- added patches
  fix CVE-2022-44267 [bsc#1207982], denial of service when parsing a PNG image
  fix CVE-2022-44268 [bsc#1207983], arbitrary file disclosure when parsing a PNG image
  + ImageMagick-CVE-2022-44267,44268.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- security update
- added patches
  fix CVE-2023-1289 [bsc#1209141], segmentation fault and possible DoS via specially crafted SVG
  + ImageMagick-CVE-2023-1289.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1681473600">- security update
- added patches
  fix CVE-2023-1906 [bsc#1210308], heap-based buffer overflow in ImportMultiSpectralQuantum() in MagickCore/quantum-import.c
  + ImageMagick-CVE-2023-1906.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1685448000">- security update
- added patches
  fix CVE-2023-34151 [bsc#1211791], Undefined behaviors of casting double to size_t in svg, mvg and other coders
  + ImageMagick-CVE-2023-34151.patch
  fix CVE-2023-34153 [bsc#1211792], Shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding
  + ImageMagick-CVE-2023-34153.patch</changelog>
</package>
<package pkgid="ff27713e0dab4e3d7fbbda08e132dcbb88cb84d55cc46db216962ff5d077e4fd" name="perl-SNMP" arch="aarch64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="352d19c67098c503d065754d59d6e0933760d720619b9c00639099cb49a035fe" name="perl-SNMP" arch="ppc64le">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="cc66f743963a004163799066ff8f763a35070fbb0920e94a23c93aaff3d70f9e" name="perl-SNMP" arch="s390x">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="200397349135f29a1535f5dce57e95a139dc4f3593d821f2939ab0edbead389a" name="perl-SNMP" arch="x86_64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="709718262053653ae0aecab7aa52c2303bb48810c16146ae3d969b8548e802f4" name="perl-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="e593aefcb5921e93c4ec5deb1294c6ad93fafdd0361ca8b78871d487de800fd9" name="perl-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="2186a22c1efa031ff0b24a07758720f7a5322df104aa3bf593300e1c72cbe5a1" name="perl-solv" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="c47395e969ce3e7a64f43bf3bad320b5a45623732faab7d7511623bbe8a95748" name="perl-solv" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="aae9d05af57a04d3f2b5aba847208293bd9df98a0a87a357b43ee24e2d50c61f" name="perl-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="087053742b55836bb84086c3b49c94e462531293fc78370ad96143efdc16df99" name="perl-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="7b23a9bf80427cda406fa5ecc4ff971b3f3f53d53a420d4ecaeff5cc7bc8d305" name="perl-solv" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="fc5e7f1e705bbc29920058f4cb7689bbd5343f70fb7ccf209f69f46917df7ae0" name="perl-solv" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="3cfb42c4e26833eb2068a4cf73a4214a3f442627ec274badedef83d0cdacff7e" name="php8" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="46647f460e71724d0b3c67e99b16b220cdfb501ff72eb070f86eae1f95237951" name="php8" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="b4e4a34193aa9b21d66802c3bcfd4bee5dba0d72069f6f947a612f92eeb00b4f" name="php8" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4a7a6424f113e9d28ef552e805d384a668a5e6daeb04bc99ed4cbffb5f671057" name="php8" arch="src">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="82fd6c5d25eade1a9e5d0bca8b10b996a6799af903d930483d456cd390f42707" name="php8" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9455961afc534c5081ae75db862f9b8f5ddd2fcff0c3c209e52f712ace882566" name="php8-bcmath" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="be41dc090182530fdc6733b84e3c30bf977af13cbf58a965b805ba4e2089ef67" name="php8-bcmath" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6e6bb1425f6be91e720eeb737eedaf7b5cb6db0e6082b015a11992bd78582f04" name="php8-bcmath" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ec5e0ba1e95c67588312b6d7b7bfbb0352152d46eab40abc57a9126398be0c24" name="php8-bcmath" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="52612747bfc05e2fb8bde1d0fb2b2f3db55245734e7ae02e6532fe831f365ade" name="php8-bz2" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ab6a35ca5d0953f16e0da6ff424479601650336fc7535a0dc1ed1a3d3878050f" name="php8-bz2" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="7c0f47f3f5daf8abfb38ac71f6194dfdf5da8234a34b7f54df95551812c5747d" name="php8-bz2" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d3fadd9f40d6527c70b2ecb176d6686956a6c3367d5924ae1d646e513aed6afb" name="php8-bz2" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="160e3a1f46e3a5c4fa82a9a87a95281f21a71727bc225ae3a7ba8f79c7338584" name="php8-calendar" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a17ecce123388feb95034f8159f9994f8fe3e1eed1b989017390da5c75825f8d" name="php8-calendar" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a4fd16a552a58a825262845299234ffb641a35b97980eaf074307c1af89251ab" name="php8-calendar" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d845964885d80f403da8ab8161a9a9c2a3f758af8f7d85421342a90c19ca0c41" name="php8-calendar" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="7b8fc38a57cafec89e67af368a813771a3406a918860278b9b155d669ba64c10" name="php8-cli" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="defc79de8cb7242d7ad43d15f8846e256b8303951314e668691cd620795d1480" name="php8-cli" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e8a936d62f8f0da388bd0d13932e6e0879b3dd774ad25b71dae36e1543a98f39" name="php8-cli" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="cf28fb775819fd0e5fc2f6795790912d94f2e1da791472e8dfff03af9f6f8c4f" name="php8-cli" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="659104b06af695ee9a85877cd9ecdf059c37b7c41dceb001d7d8d887bd8413af" name="php8-ctype" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="babbbb36041d05d45f4e8923302db553c740144ad8e940c3eaf6da3e649d055b" name="php8-ctype" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="64a2b3e1c9723bc03d3a045e5f549f90a4c978c318efba8248b6e0f3c5b9ff05" name="php8-ctype" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="3ff2a63d28deb95f053abb932cec98bfaf02cdb270d757d89736e793232ffc7d" name="php8-ctype" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="95e9862a77a28ed2133dda2f06356cc4513781309f46c10252429e394f9222e5" name="php8-curl" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="563c144a0a60566fb8ed82f82b9b4bceee6c1c24b7ffa468e7a388e96bb9cfbb" name="php8-curl" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="15ed5ab92f8b59a80d06a914a686d680023374637181e710602ca5147fc6ef97" name="php8-curl" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a3ef7d4b47736d4f5e1b0f530d761ce0d9194fa143acceec095b114dc9d80ed2" name="php8-curl" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6db96816cf2f3bbc9bfa55ed0896f254c32d0ea8b2f6dcee57888bd5ba95a1e2" name="php8-dba" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="da88299f2bd993ac3b56987699ba61cfce8ce93296ecc95786c469c9a3d80212" name="php8-dba" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="7ac91fe70619215c9c2559177a1a2cc9953be19a49b516fbef1c48f0db790d62" name="php8-dba" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f9025af889eae78d7a557676fb33cd072c3b96dff76151b97648a3ccef6c2183" name="php8-dba" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="65a4a2554990117f26bd33b2af32732761d38cf1c69ea2c54f29b81af047fad1" name="php8-devel" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="8a4e47554f34297ca8ceed0133593c9b701ec7b5173e8096b5539d2dcfe18b64" name="php8-devel" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="845af5207d9558ac3c9b9cfaeb27370a65a90863ac979d8332986931848b99d5" name="php8-devel" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="bdee4509d88c689f5ffa2c45b2be3aaa74f9ec622aebf6661a9ccdbef5c17b16" name="php8-devel" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a4d2e069c41d64038937f787bd35e5435f388196f02f4fadbe18373d06139872" name="php8-dom" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="74f12b1390c1fca877444a9d398386d8c059a3c771bda155dfd4744636b0a1b5" name="php8-dom" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="8097857bb691d7bfd15bf343ffbe02550c3e21a5454e0ef717a0e57d755eda46" name="php8-dom" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a6a38bfa248665a945b5399b67163f6b6b67daf195f9af5ab4176563101d673a" name="php8-dom" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="b94bb19101f155f3749cd0d84bfe29c761ebceb45430cc572db75e62fc17cb9d" name="php8-embed" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="1b42c4f6ecc0b6658f8991b4d2a5531ea98813de444fb5c6657151dd4f66a1fe" name="php8-embed" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="aca9a1e2965d790759bc5dfdc835c096be4630f278c8f04d01bc290b74836e7d" name="php8-embed" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="596c8569ea4f5c49a48862d0939e30648c4ffb8fb16385a23457e7893c8cd6d4" name="php8-embed" arch="src">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c9833121d1db05b85270fc9eea405492b025a9dab5ef0b170654effb3fa11de6" name="php8-embed" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="99da78c154cd82524882fe43241064ef508e9b7822b988dff5c096032e3dd194" name="php8-enchant" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="896e3660df6683cd479468471b8b8fbc51fce152e8babf60a89936b3f8861b2b" name="php8-enchant" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f06d299e250c5891b3d791e2dfcf2c047fd77c3ee516e946b03dded8d9992958" name="php8-enchant" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="03ef5f3ad43b3700885e2f90dd06e0834fc6e0cf5f72dafc51ee7563cfe9ebbf" name="php8-enchant" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="fcd03765ecf9419ae17949c88ef4eb95eb57fa21515a530ec6eafb4c0103cb02" name="php8-exif" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2229da4e10cabf34b54650c592fbe9a07c813a6f84449c4467f67a16ba5d8a3a" name="php8-exif" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="49e1a74c7d97c3c19b592e9923b440ca6255b1a07c4600fa9c1791b63718b980" name="php8-exif" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6b73a6c52732c950b32f518288f442943103936bdd3ed3d59c0090712bd49742" name="php8-exif" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="359a8097d4762fe575d2a3c4844eaeb484f48d9824c731a18af1d86d89424df7" name="php8-fastcgi" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a017d7ce322dbcd234337e9cb0a03f1daf7ebb9bbf997fa379cca8847c396f73" name="php8-fastcgi" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="5864196620b2ba0a18341c68f697c8e013246346db98665cd73a1ed6e87f8239" name="php8-fastcgi" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="30339285b324afd2cc0b3a92c8b53e32935ad12de719faefa52ad1c5686b9821" name="php8-fastcgi" arch="src">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="71344d9bfc4bbc3e4e28778a1a3d51e45d1fa64db7737566ae444c45dd40fd0e" name="php8-fastcgi" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f23c5b1ef009d03a3ad05b12c43043046406ee6920b761e35af5751799c48839" name="php8-fileinfo" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ea2b63f1886c04caa789e8cb5e0c41ca7ef2e383809054c2be30003dc30902c1" name="php8-fileinfo" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="b129615231580ec0805fa6258e1098a09907a2bd18c9cb168c76193bd012fb0a" name="php8-fileinfo" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="64265cf6c1643e1f14eaa58dc457a7f0f264ba11fac166f31e3d097ad1fb0b50" name="php8-fileinfo" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="84db73d2527c71e75a542ed8465552214563a6c1d2b532362f9f7034194bef80" name="php8-fpm" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="dcd4ea141584aafd34323cbe06cfad73b94bd18d5762aec5bf839b66fff46361" name="php8-fpm" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="15e5219e95eb3dde699b1ea9229ef617b94dd819377119972d66e5294b9ba910" name="php8-fpm" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="bf5623d017ad4ca1a7548886f7f8a34573797e50a558192c091aa44ce8e6c1ec" name="php8-fpm" arch="src">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="1a0f02ea936e2f94e681a4a526cb9f585f528d4692e11bf4e5cace443656314d" name="php8-fpm" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a77d2377bc78bf875b5d20dff25f0494c5be05aa40fb48c1a374fd2553d86752" name="php8-ftp" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="39a34e2b0de8117cc2f4a1f65ffeee1fd221913e6fc446e4622f6ee26a6262e6" name="php8-ftp" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9c883240edaea99c6d667ad9a3822a146c235bcad9aa0010c2738b5b1d1e7809" name="php8-ftp" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c835add2cd7ff47b7b0f1c42cacbd7a0bec8bce4e982222d541a81bffed7c30d" name="php8-ftp" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="fa84d54c8ccf9cd1815e82162464dc0f324538386780a0156bcc758cbd2786b3" name="php8-gd" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="33db3c99bb6f43ceddc4616dbbdbd05c2f367c4d059266f48a4e0415dcef8577" name="php8-gd" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c86d49e302fa430ca60849e49a5102bc1a6e4c9992463e0a725acff26bf4353e" name="php8-gd" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="8c269dba72e23c770efc2afc941cd83c2fc59a9654a9541110276db312f31d68" name="php8-gd" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f20e4bab5b173a75ef56d8b84a8904d362aa454c5e045ecbea07ba04382d7019" name="php8-gettext" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="5a08c84e0d056147f80807d20d3de283ac433931f3e30b7527b48b5ff977e505" name="php8-gettext" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4e412d88cbd6df820ee5225b32941bcf1d3285e693fe4e62be09e90c3bec7a66" name="php8-gettext" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="13a324608d9036e2b633166f8dc2177eecae29da5a29dfc4a38461fe7cea0f91" name="php8-gettext" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9c84aaa91ebe77fcd0cd94e0c02e696b33f3db2ab85e92c590794198a228b395" name="php8-gmp" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d3b639ec1a99ca8670d1a797cfb154ea23dbbb299a9af1f4edd033afd5b59c37" name="php8-gmp" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="bc9e111e4d093f2c284e8ea4237ae6d01821b21657121f7a6dfc1918d4bf4711" name="php8-gmp" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="549714d13c09e70e4f0f776878dc5bf24de6dbc129d616161788dff737b143d7" name="php8-gmp" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="999a40f9448210ab067377041b5d8cd52db5b667d466ae6d7a032af7d28ee864" name="php8-iconv" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a7abc8374ebdd149e487d2b35bd58954857d5f540b3978816a55936aa9d74fb0" name="php8-iconv" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="747a4fc59f6921969d79f1abd7308ed25023b0699445e554b81c4893fed54381" name="php8-iconv" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6f8902c767dd04ef2f8d9a5bf1b6670298302d0623f4e7298e97fff3dc422c37" name="php8-iconv" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6837a005d60347a50e28b26b4b16e8752ddbfdfcc8caa9ed2fd2354c8bb78b59" name="php8-intl" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="324aa222d544654d19bb74c026994514f315dd0010651a9747866716aa173735" name="php8-intl" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f602b431756b35dc48f2c804202d0b24cd3624c712fb0c90ced55becdb2d3f0a" name="php8-intl" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="5cf145f18634ac5c0757c4e9028fd4ed2ce3ec8be9fe0ad82da7aa43f4722b47" name="php8-intl" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c39f5d8b10002875770991061737103f543ec1ecce7fa580adc9e3573899cf2a" name="php8-ldap" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ab2c65389940623d810260f17325f26e5f649bb4fa141d58be92e5d6b4bc28bc" name="php8-ldap" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a356e016f7140938717f7fbd009e27a47877854eacd18a83804fda13933f41db" name="php8-ldap" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="bc6d6bc9239073e1ef5f99a77991d3d097425ae4525027dad2714308472b9c40" name="php8-ldap" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="86f77e4fb98aada7b2fe66a2b75ae699f450d6810221eddb4309c99c49d636c1" name="php8-mbstring" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="1b1667dce693b5c90b27c15c1bb9ebbc626b5752003a2055946b3e68a367598d" name="php8-mbstring" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2d509cac7a40faaf5a8c3247ed46939ce87fd1b6177ad024ec39b0e4f7c9c443" name="php8-mbstring" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="166b008452b7a11a3cb1ef68a7963439cfc68cf23e0eb64b5ce6b38be59b9bdf" name="php8-mbstring" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e8256936946e270a11c5be20bfd7041931f0160ca392b47b104172e26ab0c957" name="php8-mysql" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2fab9a317b180c46c2339cadb638732ecdf571abae43e4c744afa3787105bba6" name="php8-mysql" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f1a3e02ef32c7bcb50dc26abb0988748c8791fade12c56580b1c22688aaeaf72" name="php8-mysql" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="0da35cc93f273e2647f5e6b4fd5d6400522a8339cf05e2623def6372cf179695" name="php8-mysql" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4bcc21e408ffbdb381038d6c6cb795580d7b9ddb82901874e14ed74e83d1c7fd" name="php8-odbc" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d1e308f81353d717e49b53554fa985b018a8a962657f9912bd754496c1caaac3" name="php8-odbc" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ff5c853487eae5635d9744a781e5fc562b53839c744fb7cdf0f9b1a524b858d6" name="php8-odbc" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="436c431d2ba4ff5487561236aeff128e8f0196bab9ad1eed2ea53e5d5bd969f3" name="php8-odbc" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6796ad490fd306c5f623a53914acfe30d12e8b3efdbd4a1363d284f1008fdcbb" name="php8-opcache" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="aab46666af35bbbce011f7953ac9048ce95b12e65347e1d8c405182282463b22" name="php8-opcache" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="030932fa8f3e3b39b2a0c82866c8dfd6a4a698fafa2d375f85fbdd461709113c" name="php8-opcache" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9b9c3b70f71ad6a639f72d71cd814be3efff2d038e99b794f041a60710956f58" name="php8-opcache" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9b02a18fb276f0440f6daea0c8dd3ffc7a4f705b978e8438e16c3cf4221b56e6" name="php8-openssl" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="954b6d8c3082ebf8693cbfafad9a76f2e45f940a601bbbc107fd075d760345d3" name="php8-openssl" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="09a34b3443ae3add7335dae1fe02877483483e3cf6678dbc9ef59477770f88cd" name="php8-openssl" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f7087a5145d276e5c6915415d441c084744479c443c6b474d027ad0aa2e72ca1" name="php8-openssl" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d9275a1e1aebb5c0267622b9c77915244c8b4e989b60b86f561bfd354259f555" name="php8-pcntl" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="07fe4448fb99b90c53215b4f1e02d4e50385db0b8ef15094cd2513d970db5526" name="php8-pcntl" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="039952832db325392de93d33d9f1508aceb377be33558ef1258cc008e0632a48" name="php8-pcntl" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a6b3e9389528d1f0e521237082115cad1204c898c50a7bf35a623165cd044b87" name="php8-pcntl" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d018016307f0556a2537d525d8a5d8a64169fabbaeda0f8eec0394a794b460ae" name="php8-pdo" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f73e54a392a75d8ff0c204312d0bbeedeefe0eabd16d0359e6ea2e08b2d78440" name="php8-pdo" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4fa837cc141aec1c7f69c8b55b6b571721d2f69ab9717a8e09452ee3ce6dd388" name="php8-pdo" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="0d7b4c8c09bacb849c01bc48579730b0e69e30e98f26cd644718654468f60e0f" name="php8-pdo" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a7fae9ecd4b0f28c92b3d79274c6bf2154ac5f77ae8c0db91d6f8329e48fd714" name="php8-pgsql" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e439cd92e5cf7654dc5bdbfa1a3c3a689fe7814f950906aa20cf934426207176" name="php8-pgsql" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="795ac38c9050a6125084a579a27b38fe03e72fd015816a321a312b25783cc557" name="php8-pgsql" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="157d887b376b0610984c11f1676a3e7a354f909b20bfe77df446396a5458eaa1" name="php8-pgsql" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a44f971efdbaba8b8467c706e47b99ec2d215dd69511931955998d12f7a63fd3" name="php8-phar" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="0594cc7827b5ea7798efe52a9d100264b172e296afd3807d4894ab03392ea9e0" name="php8-phar" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="eaa7a258b4db2388372a7a1d702bc5f298712dd6b63c021b844e25bf53a15334" name="php8-phar" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="fcabc748321d9e24ee91833b5757883c1ef91d72d0188fa51ec841f4adc1fe30" name="php8-phar" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f7e95110474443199ba6d7a2ebaf16711abd0257b94f9f2ae9b37b12c5605b23" name="php8-posix" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="1a2712777cdc3381d12004365d6854024385dd2ab61e52ca659011f99d5b4fa4" name="php8-posix" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="05e7907a4781021e67b5d48790f1397b731cfb8f0daace9f4f1bdf5b4a49e097" name="php8-posix" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c29e6b1ca0aa0284a9f6115cb8e90c62743a8c84e92dc5fc4b42781307fb5bc4" name="php8-posix" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="11adaafbd53961dacba471de8920d9758b8d1bfd49ea5a90802a9ddee370f20d" name="php8-readline" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e91013995756f920c7d80947964dbc41cafc719ec8dfdab53b8c2a909a28783b" name="php8-readline" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="b45825f4c15ae3b24101d07b01bb00edb1cd7858c9132e258759279a721b6ae5" name="php8-readline" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="22eb1ff0da26c31494622c65aecb601335fd2d03087a18044bb4b18817e18a3e" name="php8-readline" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="fea5c623ea488f19547c056acd4530f21d5c731c4365f7dc02088128328ce998" name="php8-shmop" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="8b569e39411b39fc4b69b5fa6d52ff7770c230f68524cd01551cbc5f7002dc03" name="php8-shmop" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="7e47f536a7a53cd1e94282bb599e4ae2ed02cf8512ec051d4948d949ef2295d1" name="php8-shmop" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ec194e0c1609c2d1dfe0db98137c84cfea3bb14b45645e9864351e75b52849d4" name="php8-shmop" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d6060242495f9f9aeaabade9efa5df9b22469f7265d90f85c84ae66f64c81151" name="php8-snmp" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4abcfe6c2dfabdcbf1282d4d63188398ce7263664fdfd80d50860beb8d1aae66" name="php8-snmp" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="fbc46cf73c794f4f482d51cb85a0a00aeb5daddd4fce3290da98fd41613ae482" name="php8-snmp" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2d9a08297953636552590c132824a0fd713a2a8b333a6fa3fe7a80f6f603e296" name="php8-snmp" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="45fe39d8ed60f74ce81ad31dc0e4610f62e80dd58029d2e8952bd2997d1a208a" name="php8-soap" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="db393a4ebb9960b3b43a507e8c325c56ada0b95eac5160ad4ecf37df53ecbdba" name="php8-soap" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="1efe8551cc577963a0949e978d427792052f28bb066977b4bc4ccb4d39a79441" name="php8-soap" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="5f5256c46d472b8e560d268333f8ca667b4a466369e4a7869167f81b29326f31" name="php8-soap" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9cf800894d4c0e55f1841f94d25f42a7bbd5977479ff0e71f35c5d116f490f4a" name="php8-sockets" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="719669f787c7bb97d2e748b57830331e5a34801a9f5506a85f5d832cb9750177" name="php8-sockets" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="b82d07061dcd118974b68c263e05596000c33b34354bd71e2115011f18aa64be" name="php8-sockets" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c5958bd51cd47d83db5cb70b3429e82d83fa42afa2c4689b79115bcb5394e4aa" name="php8-sockets" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c440a0c94c3fa530d22145a588d2a8e143048f49e08a21cb109934373840aee3" name="php8-sodium" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="085c3af6febf705501c6f13ed97ddaa4347b5c5a0579e3e9365fadd47a58fa42" name="php8-sodium" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6d22d9cad4aff03abfcdaa1d43124d54f0678f7e0b8f91c272754703a7528224" name="php8-sodium" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4b8a8f054b659581152d5f4dcaa9ee9a51738e96b0469d1bda71d3f0d12f8a44" name="php8-sodium" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="685260e026f3fbc916ca9843c238b2c960afa802fdbca2019049d2c168878e4f" name="php8-sqlite" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="5a3383b8d5e98fd171550ca27f79b0b9b1f314ed4f2dfc077a8fbeef83e3ab19" name="php8-sqlite" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="56b1c705b2ff4a8728d8156726afb8f0f12e1eedad4bf0154efecd798caa3332" name="php8-sqlite" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="953f9143bc5094c095b5bf8c65f135b893b317211177741a2816c8588089133f" name="php8-sqlite" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="a7d33c464a84551c16f296750e1aa8431e0c6b3d07463bdc839356ae1270d838" name="php8-sysvmsg" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ca6884fd8594f96f641997a7dca87e8946a7415b60756f6d6ec6a76c17b0b6aa" name="php8-sysvmsg" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="6da8db128a873031345a4bdeab6cd5bb4613a97ab47bad13c3baf177bb87aec3" name="php8-sysvmsg" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="b3d2fe33c882a0397e936f39bf23c6856b457cf8faf29da201476410e86ead28" name="php8-sysvmsg" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="8907b221280d6d9f63a8a4387deefbe0d271cb3435d4894bb686a4cc57e124cb" name="php8-sysvsem" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="3fa7120c77bf4d5216433575558097988879c230dc393d906555541abeeabd46" name="php8-sysvsem" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="d19667a5a143a9be142fd5407dfeaa99c26da6354b7a47fee4fc6940d09288f1" name="php8-sysvsem" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="26a5cb315cf42ab0fb080485e408d213c2d69cf49fb4f34d1f5d3a612e060957" name="php8-sysvsem" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="0cf6923bcd142a784aa64749c64bf67d9f936cb5f955d387ec2803e609283cf2" name="php8-sysvshm" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9da04dd8db080b5fa90506d805d11e163548245938c0719949287dc7aeae7b11" name="php8-sysvshm" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="bf3662052f60b1e4fbcfd4c2442127b5b11a66a7f42d1f832ab04050beb64f8e" name="php8-sysvshm" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="21c374bacbc0c994ec0083273bc143adaca58fd5efd5950322d158913aba7802" name="php8-sysvshm" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="51fbcc27224dc4b93f27c8a7db134334533fd585350f8425a32de5648646ba33" name="php8-test" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="579d506d24e73f238ef76b610b993d578e201153bf2cbc70d1fe61847760044e" name="php8-test" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="ac1b40e026be3dcc8a7c79e0b90b6eaea4c272cfa441083f1420e2661da55bbd" name="php8-test" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2fd806b96ecd8c66d782e67f48a1bbfb46520f20e34973228ec7f959b2d78ffc" name="php8-test" arch="src">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e2b77772682a2106973d3b039b82b28b782d7a214b93eedcb4f711edb34c0223" name="php8-test" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="76afbb15a8e0bc87aaac36491bede1bcc13d615c7cf621a90fdf73b9784d38bf" name="php8-tidy" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="25bafec3b6d6f8f519f6ce11b0cab7f1c6acafdc69ad91f1d90718a22dff9779" name="php8-tidy" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4bfa66e527b1ff1b067226de9d61cf2053d75de86063e9842b14e9e6df7d708a" name="php8-tidy" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2404da3e022802c5c6bef54d839909c5456327a41506b9b816fc1b267e852d9f" name="php8-tidy" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="db6eae6d8b0fada0904379636163ac2729b1d6ad476b50d11699ed96b8962e61" name="php8-tokenizer" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="c7323698771c045066c6707c34582eeb3325a84d908d61da46d4e2979546ac15" name="php8-tokenizer" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="3fff5b25e0e8d58fb0f1a9ddd723ca3637e5c65d8838cda9c75b1c5fea4c0e1e" name="php8-tokenizer" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="8d8554bc4231247e59f6dba987151f1bd5478910faf4621c4dc6d0affc05b6b7" name="php8-tokenizer" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="7933f89fb63ca3dbfa17374fcd30db561b4c323323a84a5f2d09b28e8492458d" name="php8-xmlreader" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="38f25b1d31ad7a7c691d8809da3fd8c53d92001ee830c34e1768976546fc809a" name="php8-xmlreader" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="42ed067d058b99080c23ccb69fbf687a6f63fb0e60b9a7ab6e833be11889ce5c" name="php8-xmlreader" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e82178c78915779978e6834b48ccc5e3b824d647151ad42c0b0ac686636c712b" name="php8-xmlreader" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="b204c8cbd21595901a2bb6ea8a6ed7ee839a5334f7cca6c5da953d5bd56ebd7d" name="php8-xmlwriter" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4452ceb4201a0f140297841f045c8590e00379db1bddd2d06177a32874415b2c" name="php8-xmlwriter" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="5e24ca2b9b907c849f34d399e2875c5f513b2407f4250e31518268758f46006b" name="php8-xmlwriter" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="84a49f352fbddf09975de1a216787d484040b11d37ee6db899f96cdf75161d14" name="php8-xmlwriter" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="72e81da3d8c8c4dcfc49f51b515e13811c62fb340b31c5948389ab3b1e335730" name="php8-xsl" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="2dcf08515b7188ec0a8251d06ac8f4f93782b0b96314f8d2b5213af81a6d8b33" name="php8-xsl" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="8844e683a903096e90a5b672eb940066b1a3342266d6cf15ca8821da48d8506d" name="php8-xsl" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="31cd9950e9df12d3311cdfc05edcaa4bb60a03f7f4d50b59b2852e6cfc82532b" name="php8-xsl" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="e3fe16bcd9a4f47a7b27e629bad14e7cc5a22ffa494bdd0ac4a7a3f62239ba55" name="php8-zip" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="0348537e679269d7c9c958f1869ea11df9c8181d9fd7250d52688a3725c06eff" name="php8-zip" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f9491e9fff9f14dd37801d599c88376c38d10d5776f5d04ae8be5ae73fb34f4f" name="php8-zip" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="24bd328d68004a10c819426304a2e0e1939e6b3a9d484ac5acbc4b21ec79d617" name="php8-zip" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="9c54838291151c98949fe51fe1145b22c582517b760eabc2f567613287d2b6fd" name="php8-zlib" arch="aarch64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="4e8ec3aacd8735175c960213ebd681f37f9c01f08a510c06efe87c4fea8a5ef7" name="php8-zlib" arch="ppc64le">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="835a71802d7c8d3add9452f4910b9aea61ee42267242117345305fe29ef0e6cb" name="php8-zlib" arch="s390x">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="22fdb4d2bf325893d2b40e5faee04a9cfe57dd2a5264d45fc13a2c3488451f56" name="php8-zlib" arch="x86_64">
  <version epoch="0" ver="8.0.29" rel="150400.4.34.1"/>
  <changelog author="suse+build@de-korte.org" date="1622808000">- updated to 8.0.7: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.7</changelog>
  <changelog author="suse+build@de-korte.org" date="1625140800">- updated to 8.0.8: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.8</changelog>
  <changelog author="suse+build@de-korte.org" date="1627560000">- updated to 8.0.9: This is a bug fix release. See
  https://www.php.net/ChangeLog-8.php#8.0.9</changelog>
  <changelog author="mrueckert@suse.de" date="1628078400">- fix apparmor support: seems it requires a configure flag now.</changelog>
  <changelog author="suse+build@de-korte.org" date="1629979200">- updated to 8.0.10: This is a security release which also contains
  several bug fixes. See https://www.php.net/ChangeLog-8.php#8.0.10
- deleted patch
  - php-systzdata-v19.patch
- added patch
  + php-systzdata-v20.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1645531200">- security update
- added patches
  fix CVE-2021-21708 [bsc#1196252], Use after free due to php_filter_float() failing for ints
  + php8-CVE-2021-21708.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1651838400">- security update [bsc#1197644]
- added patches
  fix https://github.com/php/php-src/commit/771dbdb319fa7f90584f6b2cc2c54ccff570492d
  + php8-signedness-php_filter_validate_domain.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1654862400">- security update
- added patches
  fix CVE-2021-21707 [bsc#1193041], special character breaks path in xml parsing
  + php8-CVE-2021-21707.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655467200">- security update
- added patches
  fix CVE-2022-31626 [bsc#1200628], buffer overflow via user-supplied password when using pdo_mysql extension with mysqlnd driver
  + php8-CVE-2022-31626.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655726400">- security update
- added patches
  fix CVE-2022-31625 [bsc#1200645], uninitialized pointers free in Postgres extension
  + php8-CVE-2022-31625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1655899200">- devel package requires pear and pecl extensions [jsc#SLE-24723]
  [bsc#1200772]</changelog>
  <changelog author="pgajdos@suse.com" date="1663675200">- version update to 8.0.23 [jsc#SLE-23639]
  Version 8.0.23
  01 Sep 2022
    Core:
    Fixed incorrect double to long casting in latest clang.
    DBA:
    Fixed LMDB driver memory leak on DB creation failure.
    Fixed bug GH-9155 (dba_open("non-existing", "c-", "flatfile") segfaults).
    Intl:
    Fixed IntlDateFormatter::formatObject() parameter type.
    OPcache:
    Fixed bug GH-9033 (Loading blacklist file can fail due to negative length).
    PDO_SQLite:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    SQLite3:
    Fixed bug GH-9032 (SQLite3 authorizer crashes on NULL values).
    Standard:
    Fixed bug GH-9017 (php_stream_sock_open_from_socket could return NULL).
    Streams:
    Fixed bug GH-8472 (The resource returned by stream_socket_accept may have incorrect metadata).
    Fixed bug GH-8409 (SSL handshake timeout leaves persistent connections hanging).
  Version 8.0.22
  04 Aug 2022
    CLI:
    Fixed potential overflow for the builtin server via the PHP_CLI_SERVER_WORKERS environment variable.
    Core:
    Fixed bug GH-8923 (error_log on Windows can hold the file write lock).
    Fixed bug GH-8995 (WeakMap object reference offset causing TypeError).
    Date:
    Fixed bug #80047 (DatePeriod doesn't warn with custom DateTimeImmutable).
    DBA:
    Fixed LMDB driver hanging when attempting to delete a non-existing key.
    FPM:
    Fixed zlog message prepend, free on incorrect address.
    Fixed possible double free on configuration loading failure.
    GD:
    Fixed bug GH-8848 (imagecopyresized() error refers to the wrong argument).
    Intl:
    Fixed build for ICU 69.x and onwards.
    OPcache:
    Fixed bug GH-8847 (PHP hanging infinitly at 100% cpu when check php syntaxe of a valid file).
    Standard:
    Fixed the crypt_sha256/512 api build with clang &gt; 12.
    Uses CCRandomGenerateBytes instead of arc4random_buf on macOs.
  Version 8.0.21
  07 Jul 2022
    Core:
    Fixed potential use after free in php_binary_init().
    CLI:
    Fixed GH-8827 (Intentionally closing std handles no longer possible).
    COM:
    Fixed bug GH-8778 (Integer arithmethic with large number variants fails).
    Curl:
    Fixed CURLOPT_TLSAUTH_TYPE is not treated as a string option.
    Date:
    Fixed bug #74671 (DST timezone abbreviation has incorrect offset).
    Fixed bug #77243 (Weekdays are calculated incorrectly for negative years).
    Fixed bug #78139 (timezone_open accepts invalid timezone string argument).
    FPM:
    Fixed bug #67764 (fpm: syslog.ident don't work).
    MBString:
    Fixed bug GH-8685 (pcre not ready at mbstring startup).
    ODBC:
    Fixed handling of single-key connection strings.
    OpenSSL:
    Fixed bug #50293 (Several openssl functions ignore the VCWD).
    Fixed bug #81713 (NULL byte injection in several OpenSSL functions working with certificates).
    PDO_ODBC:
    Fixed errorInfo() result on successful PDOStatement-&gt;execute().
    Fixed handling of single-key connection strings.
    Zip:
    Fixed bug GH-8781 (ZipArchive::close deletes zip file without updating stat cache).
  Version 8.0.20
  09 Jun 2022
    CLI:
    Fixed bug GH-8575 (CLI closes standard streams too early).
    Core:
    Fixed Haiku ZTS builds.
    Date:
    Fixed bug GH-8471 (Segmentation fault when converting immutable and mutable DateTime instances created using reflection).
    FPM:
    Fixed ACL build check on MacOS.
    Fixed bug #72185: php-fpm writes empty fcgi record causing nginx 502.
    Mysqlnd:
    Fixed bug #81719: mysqlnd/pdo password buffer overflow. (CVE-2022-31626)
    OPcache:
    Fixed bug GH-8466 (ini_get() is optimized out when the option does not exist).
    Pcntl:
    Fixed Haiku build.
    Pgsql:
    Fixed bug #81720: Uninitialized array in pg_query_params(). (CVE-2022-31625)
    Soap:
    Fixed bug GH-8578 (Error on wrong parameter on SoapHeader constructor).
    Fixed bug GH-8538 (SoapClient may strip parts of nmtokens).
    SPL:
    Fixed bug GH-8235 (iterator_count() may run indefinitely).
    Zip:
    Fixed type for index in ZipArchive::replaceFile.
  Version 8.0.19
  12 May 2022
    Core:
    Fixed bug GH-8289 (Exceptions thrown within a yielded from iterator are not rethrown into the generator).
    Date:
    Fixed bug GH-7979 (DatePeriod iterator advances when checking if valid).
    FFI:
    Fixed bug GH-8433 (Assigning function pointers to structs in FFI leaks).
    FPM:
    Fixed bug #76003 (FPM /status reports wrong number of active processe).
    Fixed bug #77023 (FPM cannot shutdown processes).
    Fixed comment in kqueue remove callback log message.
    Iconv:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
    Intl:
    Fixed bug GH-8364 (msgfmt_format $values may not support references).
    MySQLi:
    Fixed bug GH-8267 (MySQLi uses unsupported format specifier on Windows).
    SPL:
    Fixed bug GH-8366 (ArrayIterator may leak when calling __construct()).
    Fixed bug GH-8273 (SplFileObject: key() returns wrong value).
    Streams:
    Fixed php://temp does not preserve file-position when switched to temporary file.
    zlib:
    Fixed bug GH-8218 (ob_end_clean does not reset Content-Encoding header).
  Version 8.0.18
  14 Apr 2022
    Core:
    Fixed freeing of internal attribute arguments.
    Fixed bug GH-8070 (memory leak of internal function attribute hash).
    Fixed bug GH-8160 (ZTS support on Alpine is broken).
    Filter:
    Fixed signedness confusion in php_filter_validate_domain().
    Intl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    MBString:
    Fixed bug GH-8208 (mb_encode_mimeheader: $indent functionality broken).
    MySQLi:
    Fixed bug GH-8068 (mysqli_fetch_object creates inaccessible properties).
    Pcntl:
    Fixed bug GH-8142 (Compilation error on cygwin).
    PgSQL:
    Fixed result_type related stack corruption on LLP64 architectures.
    Fixed bug GH-8253 (pg_insert() fails for references).
    Sockets:
    Fixed Solaris builds.
    SPL:
    Fixed bug GH-8121 (SplFileObject - seek and key with csv file inconsistent).
    Standard:
    Fixed bug GH-8048 (Force macOS to use statfs).
  Version 8.0.17
  17 Mar 2022
    Core:
    Fixed Haiku ZTS build.
    GD:
    Fixed libpng warning when loading interlaced images.
    FPM:
    Fixed bug #76109 (Unsafe access to fpm scoreboard).
    Iconv:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
    Fixed bug GH-7980 (Unexpected result for iconv_mime_decode).
    MySQLnd:
    Fixed bug GH-8058 (NULL pointer dereference in mysqlnd package).
    OPcache:
    Fixed bug GH-8074 (Wrong type inference of range() result).
    Reflection:
    Fixed bug GH-8080 (ReflectionClass::getConstants() depends on def. order).
    Zlib:
    Fixed bug GH-7953 (ob_clean() only does not set Content-Encoding).
  Version 8.0.16
  17 Feb 2022
    Core:
    Fixed bug #81430 (Attribute instantiation leaves dangling pointer).
    Fixed bug GH-7896 (Environment vars may be mangled on Windows).
    FFI:
    Fixed bug GH-7867 (FFI::cast() from pointer to array is broken).
    Filter:
    Fix #81708: UAF due to php_filter_float() failing for ints. (CVE-2021-21708)
    FPM:
    Fixed memory leak on invalid port.
    MBString:
    Fixed bug GH-7902 (mb_send_mail may delimit headers with LF only).
    MySQLnd:
    Fixed bug GH-7972 (MariaDB version prefix 5.5.5- is not stripped).
    Sockets:
    Fixed ext/sockets build on Haiku.
    Fixed bug GH-7978 (sockets extension compilation errors).
    Standard:
    Fixed bug GH-7875 (mails are sent even if failure to log throws exception).
  Version 8.0.15
  20 Jan 2022
    Core:
    Fixed bug #81656 (GCC-11 silently ignores -R).
    Fixed bug #81585 (cached_chunks are not counted to real_size on shutdown).
    Filter:
    Fixed FILTER_FLAG_NO_RES_RANGE flag.
    Hash:
    Fixed bug GH-7759 (Incorrect return types for hash() and hash_hmac()).
    Fixed bug GH-7826 (Inconsistent argument name in hash_hmac_file and hash_file).
    MySQLnd:
    Fixed bug where large bigints may be truncated.
    OCI8:
    Fixed bug GH-7765 (php_oci_cleanup_global_handles segfaults at second call).
    OPcache:
    Fixed bug #81679 (Tracing JIT crashes on reattaching).
    PDO_PGSQL:
    Fixed error message allocation of PDO PgSQL.
    Sockets:
    Avoid void* arithmetic in sockets/multicast.c on NetBSD.
    Spl:
    Fixed bug #75917 (SplFileObject::seek broken with CSV flags).
  Version 8.0.14
  16 Dec 2021
    Core:
    Fixed bug #81582 (Stringable not implicitly declared if __toString() came from a trait).
    Fixed bug #81591 (Fatal Error not properly logged in particular cases).
    Fixed bug #81626 (Error on use static:: in __сallStatic() wrapped to Closure::fromCallable()).
    Fixed bug #81631 (::class with dynamic class name may yield wrong line number).
    FPM:
    Fixed bug #81513 (Future possibility for heap overflow in FPM zlog).
    GD:
    Fixed bug #71316 (libpng warning from imagecreatefromstring).
    IMAP:
    Fixed bug #81649 (imap_(un)delete accept sequences, not single numbers).
    OpenSSL:
    Fixed bug #75725 (./configure: detecting RAND_egd).
    PCRE:
    Fixed bug #74604 (Out of bounds in php_pcre_replace_impl).
    SPL:
    Fixed bug #81587 (MultipleIterator Segmentation fault w/ SimpleXMLElement attached).
    Standard:
    Fixed bug #81618 (dns_get_record fails on FreeBSD for missing type).
    Fixed bug #81659 (stream_get_contents() may unnecessarily overallocate).
  Version 8.0.13
  18 Nov 2021
    Core:
    Fixed bug #81518 (Header injection via default_mimetype / default_charset).
    Date:
    Fixed bug #81500 (Interval serialization regression since 7.3.14 / 7.4.2).
    DBA:
    Fixed bug #81588 (TokyoCabinet driver leaks memory).
    MBString:
    Fixed bug #76167 (mbstring may use pointer from some previous request).
    Opcache:
    Fixed bug #81512 (Unexpected behavior with arrays and JIT).
    PCRE:
    Fixed bug #81424 (PCRE2 10.35 JIT performance regression).
    XML:
    Fixed bug #79971 (special character is breaking the path in xml function). (CVE-2021-21707)
    XMLReader:
    Fixed bug #81521 (XMLReader::getParserProperty may throw with a valid property).
  Version 8.0.12
  21 Oct 2021
    CLI:
    Fixed bug #81496 (Server logs incorrect request method).
    Core:
    Fixed bug #81435 (Observer current_observed_frame may point to an old (overwritten) frame).
    Fixed bug #81380 (Observer may not be initialized properly).
    DOM:
    Fixed bug #81433 (DOMElement::setIdAttribute() called twice may remove ID).
    FFI:
    Fixed bug #79576 ("TYPE *" shows unhelpful message when type is not defined).
    FPM:
    Fixed bug #81026 (PHP-FPM oob R/W in root process leading to privilege escalation) (CVE-2021-21703, bsc#1192050).
    Fileinfo:
    Fixed bug #78987 (High memory usage during encoding detection).
    Filter:
    Fixed bug #61700 (FILTER_FLAG_IPV6/FILTER_FLAG_NO_PRIV|RES_RANGE failing).
    Opcache:
    Fixed bug #81472 (Cannot support large linux major/minor device number when read /proc/self/maps).
    Reflection:
    ReflectionAttribute is no longer final.
    SPL:
    Fixed bug #80663 (Recursive SplFixedArray::setSize() may cause double-free).
    Fixed bug #81477 (LimitIterator + SplFileObject regression in 8.0.1).
    Standard:
    Fixed bug #69751 (Change Error message of sprintf/printf for missing/typo position specifier).
    Streams:
    Fixed bug #81475 (stream_isatty emits warning with attached stream wrapper).
    XML:
    Fixed bug #70962 (XML_OPTION_SKIP_WHITE strips embedded whitespace).
    Zip:
    Fixed bug #81490 (ZipArchive::extractTo() may leak memory).
    Fixed bug #77978 (Dirname ending in colon unzips to wrong dir).
  Version 8.0.11
  23 Sep 2021
    Core:
    Fixed bug #81302 (Stream position after stream filter removed).
    Fixed bug #81346 (Non-seekable streams don't update position after write).
    Fixed bug #73122 (Integer Overflow when concatenating strings).
    GD:
    Fixed bug #53580 (During resize gdImageCopyResampled cause colors change).
    Opcache:
    Fixed bug #81353 (segfault with preloading and statically bound closure).
    Shmop:
    Fixed bug #81407 (shmop_open won't attach and causes php to crash).
    Standard:
    Fixed bug #71542 (disk_total_space does not work with relative paths).
    Fixed bug #81400 (Unterminated string in dns_get_record() results).
    SysVMsg:
    Fixed bug #78819 (Heap Overflow in msg_send).
    XML:
    Fixed bug #81351 (xml_parse may fail, but has no error code).
    Zip:
    Fixed bug #80833 (ZipArchive::getStream doesn't use setPassword).
    Fixed bug #81420 (ZipArchive::extractTo extracts outside of destination).
- deleted patches
  - php8-CVE-2021-21707.patch (upstreamed)
  - php8-CVE-2021-21708.patch (upstreamed)
  - php8-CVE-2022-31625.patch (upstreamed)
  - php8-CVE-2022-31626.patch (upstreamed)</changelog>
  <changelog author="pgajdos@suse.com" date="1664798400">- version update to 8.0.24
    29 Sep 2022
    Core:
    Fixed bug #81726: phar wrapper: DOS when using quine gzip file. (CVE-2022-31628)
    Fixed bug #81727: Don't mangle HTTP variable names that clash with ones that have a specific semantic meaning. (CVE-2022-31629)
    Fixed bug GH-9323 (Crash in ZEND_RETURN/GC/zend_call_function) (Tim Starling)
    Fixed bug GH-9361 (Segmentation fault on script exit #9379).
    Fixed bug GH-9447 (Invalid class FQN emitted by AST dump for new and class constants in constant expressions).
    DOM:
    Fixed bug #79451 (DOMDocument-&gt;replaceChild on doctype causes double free).
    FPM:
    Fixed bug GH-8885 (FPM access.log with stderr begins to write logs to error_log after daemon reload).
    Fixed bug #77780 ("Headers already sent..." when previous connection was aborted).
    GMP:
    Fixed bug GH-9308 (GMP throws the wrong error when a GMP object is passed to gmp_init()).
    Intl:
    Fixed bug GH-9421 (Incorrect argument number for ValueError in NumberFormatter).
    PCRE:
    Fixed pcre.jit on Apple Silicon.
    PDO_PGSQL:
    Fixed bug GH-9411 (PgSQL large object resource is incorrectly closed).
    Reflection:
    Fixed bug GH-8932 (ReflectionFunction provides no way to get the called class of a Closure).
    Streams:
    Fixed bug GH-9316 ($http_response_header is wrong for long status line).
- fixes [bsc#1203867] and [bsc#1203870]</changelog>
  <changelog author="pgajdos@suse.com" date="1667217600">- version update to 8.0.25 [bsc#1204577][bsc#1204979]
    27 Oct 2022
    GD:
    Fixed bug #81739: OOB read due to insufficient input validation in imageloadfont(). (CVE-2022-31630)
    Hash:
    Fixed bug #81738: buffer overflow in hash_update() on long parameter. (CVE-2022-37454)
    Session:
    Fixed bug GH-9583 (session_create_id() fails with user defined save handler that doesn't have a validateId() method).
    Streams:
    Fixed bug GH-9590 (stream_select does not abort upon exception or empty valid fd set).</changelog>
  <changelog author="pgajdos@suse.com" date="1669636800">- amend %preun to fix [bsc#1205782]</changelog>
  <changelog author="pgajdos@suse.com" date="1673265600">- version update to 8.0.27 [bsc#1206958]
  05 Jan 2023
    PDO/SQLite:
    Fixed bug #81740 (PDO::quote() may return unquoted string). (CVE-2022-31631)
- version update to 8.0.26
  24 Nov 2022
    CLI:
    Fixed bug GH-9709 (Null pointer dereference with -w/-s options).
    Core:
    Fixed bug GH-9752 (Generator crashes when interrupted during argument evaluation with extra named params).
    Fixed bug GH-9801 (Generator crashes when memory limit is exceeded during initialization).
    Fixed potential NULL pointer dereference in Windows shm*() functions.
    Fixed bug GH-9750 (Generator memory leak when interrupted during argument evaluation.
    Date:
    Fixed bug GH-9763 (DateTimeZone ctr mishandles input and adds null byte if the argument is an offset larger than 100*60 minutes).
    FPM:
    Fixed bug GH-9754 (SaltStack (using Python subprocess) hangs when running php-fpm 8.1.11).
    mysqli:
    Fixed bug GH-9841 (mysqli_query throws warning despite using silenced error mode).
    OpenSSL:
    Fixed bug GH-8430 (OpenSSL compiled with no-md2, no-md4 or no-rmd160 does not build).
    SOAP:
    Fixed GH-9720 (Null pointer dereference while serializing the response).</changelog>
  <changelog author="pgajdos@suse.com" date="1676548800">- version update to 8.0.28
  14 Feb 2023
    Core:
    Fixed bug #81744 (Password_verify() always return true with some hash).
    Fixed bug #81746 (1-byte array overrun in common path resolve code).
    SAPI:
    Fixed bug GHSA-54hq-v5wp-fqgv (DOS vulnerability when parsing multipart request body). (CVE-2023-0662)
    This is a security release that addresses CVE-2023-0567,
    CVE-2023-0568, and CVE-2023-0662.
- We are not affected by CVE-2023-0567 (https://github.com/php/php-src/security/advisories/GHSA-7fj2-8x79-rjf4)
  as we build against system libcrypt.
- See [bsc#1208388], [bsc#1208366], [bsc#1208367].</changelog>
  <changelog author="pgajdos@suse.com" date="1678104000">- ensure extension=mysqlnd will be called before extension=mysqli
  [bsc#1205162]</changelog>
  <changelog author="pgajdos@suse.com" date="1678795200">- fix potential buffer overflow [bsc#1208199]
- modified patches
  % php-systzdata-v20.patch (refreshed)</changelog>
  <changelog author="pgajdos@suse.com" date="1686830400">- version update to 8.0.29
  Soap:
    Fixed bug GHSA-76gg-c692-v2mw (Missing error check and insufficient
    random bytes in HTTP Digest authentication for SOAP).
- CVE-2023-3247 [bsc#1212349]</changelog>
</package>
<package pkgid="f359e32af604176f90f2d27278f8f6f22c9e1aa5f39c0e4acd0125ee47066be4" name="picocli" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="150200.3.8.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of picocli 4.0.4</changelog>
  <changelog author="fstrba@suse.com" date="1642507200">- Upgrade to version 4.6.2
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.6.2/RELEASE-NOTES.md</changelog>
  <changelog author="fstrba@suse.com" date="1656072000">- Build picocli using ant to avoid cycles</changelog>
</package>
<package pkgid="a9a2aa6915205fed60acf9f41b6db0c176a47a0bbcb583832f71ffc46a3dfc3d" name="picocli" arch="src">
  <version epoch="0" ver="4.6.2" rel="150200.3.8.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of picocli 4.0.4</changelog>
  <changelog author="fstrba@suse.com" date="1642507200">- Upgrade to version 4.6.2
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.6.2/RELEASE-NOTES.md</changelog>
  <changelog author="fstrba@suse.com" date="1656072000">- Build picocli using ant to avoid cycles</changelog>
</package>
<package pkgid="0de74b86c2ee201658a67b30f34b157e79f05e9f047847ed208847a0d3c0f099" name="picocli" arch="noarch">
  <version epoch="0" ver="4.7.4" rel="150200.3.11.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of picocli 4.0.4</changelog>
  <changelog author="fstrba@suse.com" date="1642507200">- Upgrade to version 4.6.2
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.6.2/RELEASE-NOTES.md</changelog>
  <changelog author="fstrba@suse.com" date="1656072000">- Build picocli using ant to avoid cycles</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1685620800">- Upgrade to version 4.7.3
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.7.3/RELEASE-NOTES.md
- Package artifacts: picocli-{codegen,shell-jline2}
- JPMS: package module discriptors when building with java &gt;= 9
- Take POMs from Maven Central</changelog>
  <changelog author="fstrba@suse.com" date="1685966400">- Require java 9 for build so that we can build the module-info.java
  always
- Build all classes with source/target 8 and the module-info.java
  with release 9, which makes the jars usable with java 8 and higher</changelog>
  <changelog author="fstrba@suse.com" date="1686657600">- Update to version 4.7.4
  * Fixes:
    + API: Add setter for name in
    picocli.shell.jline3.PicocliCommands.
    + Enhancement: Improved feedback on mistyped subcommands
    + Enhancement: prevent
    java.nio.charset.UnsupportedCharsetException: cp0 on windows,
    and fall back to the default charset if the charset provided
    by System property sun.stdout.encoding is invalid
    + Bugfix: Option "mapFallbackValue" ignored when inherited to
    subcommand
    + Bugfix: fix issue with required options in ArgGroup becoming
    optional when combined with DefaultValueProvider
- Fetch sources using source service: this allows filter out
  binaries with spurious legal status and which we don't use for
  build
- Due to a bug in the upstream github repository, fetch sources from
  our private fork until https://github.com/remkop/picocli/pull/2045
  gets integrated upstream
- Added patch:
  * revert-version.patch
    + revert a version change between our fixed code and the
    upstream tag</changelog>
</package>
<package pkgid="7687e62ef1c2cda07e67fcab3d14c2c054b3b66f5f9c47dc701cff82aecea5be" name="picocli" arch="src">
  <version epoch="0" ver="4.7.4" rel="150200.3.11.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of picocli 4.0.4</changelog>
  <changelog author="fstrba@suse.com" date="1642507200">- Upgrade to version 4.6.2
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.6.2/RELEASE-NOTES.md</changelog>
  <changelog author="fstrba@suse.com" date="1656072000">- Build picocli using ant to avoid cycles</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1685620800">- Upgrade to version 4.7.3
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.7.3/RELEASE-NOTES.md
- Package artifacts: picocli-{codegen,shell-jline2}
- JPMS: package module discriptors when building with java &gt;= 9
- Take POMs from Maven Central</changelog>
  <changelog author="fstrba@suse.com" date="1685966400">- Require java 9 for build so that we can build the module-info.java
  always
- Build all classes with source/target 8 and the module-info.java
  with release 9, which makes the jars usable with java 8 and higher</changelog>
  <changelog author="fstrba@suse.com" date="1686657600">- Update to version 4.7.4
  * Fixes:
    + API: Add setter for name in
    picocli.shell.jline3.PicocliCommands.
    + Enhancement: Improved feedback on mistyped subcommands
    + Enhancement: prevent
    java.nio.charset.UnsupportedCharsetException: cp0 on windows,
    and fall back to the default charset if the charset provided
    by System property sun.stdout.encoding is invalid
    + Bugfix: Option "mapFallbackValue" ignored when inherited to
    subcommand
    + Bugfix: fix issue with required options in ArgGroup becoming
    optional when combined with DefaultValueProvider
- Fetch sources using source service: this allows filter out
  binaries with spurious legal status and which we don't use for
  build
- Due to a bug in the upstream github repository, fetch sources from
  our private fork until https://github.com/remkop/picocli/pull/2045
  gets integrated upstream
- Added patch:
  * revert-version.patch
    + revert a version change between our fixed code and the
    upstream tag</changelog>
</package>
<package pkgid="81048d107dd25e335f03e1e93b782543fdb0457bb1d63070150cff1324735e19" name="picocli-javadoc" arch="noarch">
  <version epoch="0" ver="4.6.2" rel="150200.3.8.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of picocli 4.0.4</changelog>
  <changelog author="fstrba@suse.com" date="1642507200">- Upgrade to version 4.6.2
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.6.2/RELEASE-NOTES.md</changelog>
  <changelog author="fstrba@suse.com" date="1656072000">- Build picocli using ant to avoid cycles</changelog>
</package>
<package pkgid="89b3e8b88fc2377e02415a8807736dc9a132867c8924fe455f78b03efab40400" name="picocli-javadoc" arch="noarch">
  <version epoch="0" ver="4.7.4" rel="150200.3.11.1"/>
  <changelog author="fstrba@suse.com" date="1573214400">- Initial packaging of picocli 4.0.4</changelog>
  <changelog author="fstrba@suse.com" date="1642507200">- Upgrade to version 4.6.2
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.6.2/RELEASE-NOTES.md</changelog>
  <changelog author="fstrba@suse.com" date="1656072000">- Build picocli using ant to avoid cycles</changelog>
  <changelog author="shvetz.anton@gmail.com" date="1685620800">- Upgrade to version 4.7.3
  * full changes from previous versions are in
    https://github.com/remkop/picocli/blob/v4.7.3/RELEASE-NOTES.md
- Package artifacts: picocli-{codegen,shell-jline2}
- JPMS: package module discriptors when building with java &gt;= 9
- Take POMs from Maven Central</changelog>
  <changelog author="fstrba@suse.com" date="1685966400">- Require java 9 for build so that we can build the module-info.java
  always
- Build all classes with source/target 8 and the module-info.java
  with release 9, which makes the jars usable with java 8 and higher</changelog>
  <changelog author="fstrba@suse.com" date="1686657600">- Update to version 4.7.4
  * Fixes:
    + API: Add setter for name in
    picocli.shell.jline3.PicocliCommands.
    + Enhancement: Improved feedback on mistyped subcommands
    + Enhancement: prevent
    java.nio.charset.UnsupportedCharsetException: cp0 on windows,
    and fall back to the default charset if the charset provided
    by System property sun.stdout.encoding is invalid
    + Bugfix: Option "mapFallbackValue" ignored when inherited to
    subcommand
    + Bugfix: fix issue with required options in ArgGroup becoming
    optional when combined with DefaultValueProvider
- Fetch sources using source service: this allows filter out
  binaries with spurious legal status and which we don't use for
  build
- Due to a bug in the upstream github repository, fetch sources from
  our private fork until https://github.com/remkop/picocli/pull/2045
  gets integrated upstream
- Added patch:
  * revert-version.patch
    + revert a version change between our fixed code and the
    upstream tag</changelog>
</package>
<package pkgid="29f9d7368c691f8b1ea048c5cf72e2e4753fd169ea097c6850fe44dae220b28d" name="post-build-checks" arch="noarch">
  <version epoch="0" ver="84.87+git20220325.f46ef3c" rel="150500.3.2.1"/>
  <changelog author="mliska@suse.cz" date="1562932800">- Disable tests as GCC checks are gone.</changelog>
  <changelog author="ro@suse.com" date="1563278400">- Update to version 84.88+git20190716.5a0e034:
  * Remove unused tests.</changelog>
  <changelog author="ro@suse.com" date="1578398400">- Update to version 84.88+git20200107.dc3b3a3:
  * 99-check-remove-rpms: preserve libgomp variants</changelog>
  <changelog author="lnussel@suse.de" date="1578657600">- Update to version 84.87+git20200110.2d02f07:
  * Tweaks to make rpm-ndb build
  * Detect name of coreutils package and don't remove it
- restore correct version</changelog>
  <changelog author="lnussel@suse.de" date="1583409600">- Update to version 84.87+git20200305.61b5cdf:
  * Fix ghost logic</changelog>
  <changelog author="lnussel@suse.de" date="1584619200">- Update to version 84.87+git20200319.57fe0e2:
  * Don't de-install the packages containing su and sh</changelog>
  <changelog author="kukuk@suse.com" date="1584964800">- Update to version 84.87+git20200323.45c6eba:
  * Don't remove find, gzip and cpio</changelog>
  <changelog author="ro@suse.de" date="1597752000">- Update to version 84.87+git20200818.e4ffaa8:
  * 50-check-permissions use --level option of chkstat
    (boo#1159963)</changelog>
  <changelog author="ro@suse.de" date="1597838400">- Update to version 84.87+git20200819.5847424:
  * Revert "50-check-permissions use --level option of chkstat"</changelog>
  <changelog author="ro@suse.de" date="1598270400">- add the abuild user to the trusted group so that
  fusermount works (boo#1159963)</changelog>
  <changelog author="ro@suse.de" date="1600257600">- Update to version 84.87+git20200916.d341ab0:
  * add finalize-system hacks
  * 01-add_abuild_user_to_trusted_group
  * also create abuild user if needed
  * 02-set_timezone_to_utc
  * 11-hack_uname_version_to_kernel_version
  * 98-revert-uname-hack
  * add cleanup as check script
- drop all pre/post scripts this is now all done by hooks
  inside the buildsystem, the package install scripts will
  not do any harm now and we do not depend on the install
  sequence any more (revisited boo#1159963)</changelog>
  <changelog author="lnussel@suse.de" date="1612785600">- Update to version 84.87+git20210208.d8d4154:
  * Don't remove usrmerge helper packages (boo#1029961)</changelog>
  <changelog author="ro@suse.de" date="1613390400">- Update to version 84.87+git20210215.ed75983:
  * Don't deinstall any pam_unix variant</changelog>
  <changelog author="lnussel@suse.de" date="1614859200">- Update to version 84.87+git20210304.df696a0:
  * final name is glibc-usrmerge-bootstrap-helper</changelog>
  <changelog author="ro@suse.de" date="1621252800">- Update to version 84.87+git20210517.d960568:
  * support cross builds</changelog>
  <changelog author="ro@suse.de" date="1643371200">- Update to version 84.87+git20220128.2a04ecb:
  * keep package that provides /usr/bin/sh</changelog>
  <changelog author="ro@suse.de" date="1643371201">- Update to version 84.87+git20220128.77a97b9:
  * change cross build detection logic to be more robust
  * kill useless use of cat awards</changelog>
  <changelog author="lnussel@suse.de" date="1647864000">- Update to version 84.87+git20220321.9651edb:
  * Restore secure permissions in build environment (bsc#1159963)
  * Handle default being easy
  * Various speedups around invoking rpm
- change service file from disabled to manual</changelog>
  <changelog author="dmueller@suse.com" date="1647950400">- Update to version 84.87+git20220322.48f07a0:
  * Remove errneous whitespaces
  * fix comparison name</changelog>
  <changelog author="meissner@suse.com" date="1648468800">- Update to version 84.87+git20220325.f46ef3c:
  * enable -z now linking by default</changelog>
</package>
<package pkgid="feeb59ccefe8d4723def957ecd55a748d977516e977f8009d6717d79336ac9a2" name="post-build-checks" arch="src">
  <version epoch="0" ver="84.87+git20220325.f46ef3c" rel="150500.3.2.1"/>
  <changelog author="mliska@suse.cz" date="1562932800">- Disable tests as GCC checks are gone.</changelog>
  <changelog author="ro@suse.com" date="1563278400">- Update to version 84.88+git20190716.5a0e034:
  * Remove unused tests.</changelog>
  <changelog author="ro@suse.com" date="1578398400">- Update to version 84.88+git20200107.dc3b3a3:
  * 99-check-remove-rpms: preserve libgomp variants</changelog>
  <changelog author="lnussel@suse.de" date="1578657600">- Update to version 84.87+git20200110.2d02f07:
  * Tweaks to make rpm-ndb build
  * Detect name of coreutils package and don't remove it
- restore correct version</changelog>
  <changelog author="lnussel@suse.de" date="1583409600">- Update to version 84.87+git20200305.61b5cdf:
  * Fix ghost logic</changelog>
  <changelog author="lnussel@suse.de" date="1584619200">- Update to version 84.87+git20200319.57fe0e2:
  * Don't de-install the packages containing su and sh</changelog>
  <changelog author="kukuk@suse.com" date="1584964800">- Update to version 84.87+git20200323.45c6eba:
  * Don't remove find, gzip and cpio</changelog>
  <changelog author="ro@suse.de" date="1597752000">- Update to version 84.87+git20200818.e4ffaa8:
  * 50-check-permissions use --level option of chkstat
    (boo#1159963)</changelog>
  <changelog author="ro@suse.de" date="1597838400">- Update to version 84.87+git20200819.5847424:
  * Revert "50-check-permissions use --level option of chkstat"</changelog>
  <changelog author="ro@suse.de" date="1598270400">- add the abuild user to the trusted group so that
  fusermount works (boo#1159963)</changelog>
  <changelog author="ro@suse.de" date="1600257600">- Update to version 84.87+git20200916.d341ab0:
  * add finalize-system hacks
  * 01-add_abuild_user_to_trusted_group
  * also create abuild user if needed
  * 02-set_timezone_to_utc
  * 11-hack_uname_version_to_kernel_version
  * 98-revert-uname-hack
  * add cleanup as check script
- drop all pre/post scripts this is now all done by hooks
  inside the buildsystem, the package install scripts will
  not do any harm now and we do not depend on the install
  sequence any more (revisited boo#1159963)</changelog>
  <changelog author="lnussel@suse.de" date="1612785600">- Update to version 84.87+git20210208.d8d4154:
  * Don't remove usrmerge helper packages (boo#1029961)</changelog>
  <changelog author="ro@suse.de" date="1613390400">- Update to version 84.87+git20210215.ed75983:
  * Don't deinstall any pam_unix variant</changelog>
  <changelog author="lnussel@suse.de" date="1614859200">- Update to version 84.87+git20210304.df696a0:
  * final name is glibc-usrmerge-bootstrap-helper</changelog>
  <changelog author="ro@suse.de" date="1621252800">- Update to version 84.87+git20210517.d960568:
  * support cross builds</changelog>
  <changelog author="ro@suse.de" date="1643371200">- Update to version 84.87+git20220128.2a04ecb:
  * keep package that provides /usr/bin/sh</changelog>
  <changelog author="ro@suse.de" date="1643371201">- Update to version 84.87+git20220128.77a97b9:
  * change cross build detection logic to be more robust
  * kill useless use of cat awards</changelog>
  <changelog author="lnussel@suse.de" date="1647864000">- Update to version 84.87+git20220321.9651edb:
  * Restore secure permissions in build environment (bsc#1159963)
  * Handle default being easy
  * Various speedups around invoking rpm
- change service file from disabled to manual</changelog>
  <changelog author="dmueller@suse.com" date="1647950400">- Update to version 84.87+git20220322.48f07a0:
  * Remove errneous whitespaces
  * fix comparison name</changelog>
  <changelog author="meissner@suse.com" date="1648468800">- Update to version 84.87+git20220325.f46ef3c:
  * enable -z now linking by default</changelog>
</package>
<package pkgid="c0455058a955b86ab7caa009683a916764943b9a026bbf64ef837bc47737862a" name="powerpc-utils" arch="ppc64le">
  <version epoch="0" ver="1.3.11" rel="150500.3.3.1"/>
  <changelog author="msuchanek@suse.de" date="1635508800">- Avoid error with HCN IDs containing same consecutive bytes (bsc#1192095 ltc#194963).
  + hcnmgr-Avoid-hexdum-squeezing-consecutive-identical-.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1641384000">- Add support for vnic backup device for HNV (jsc#SLE-23097).
  + 0001-hcnmgr-Support-vNIC-as-backup-device.patch
  + 0002-hcnmgr-Remove-some-dead-code.patch
- Add support for NVMf devices (jsc#SLE-18643, bsc#1198728, ltc#197650).
  + 0003-ofpathname-Fix-nvme-support-in-ANA-mode.patch
  + 0004-ofpathname-Add-support-for-NVMf-devices.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1641384001">- Fix reported online memory in legacy format (bsc#1191147).
  + lparstat-Fix-reported-online-memory-in-legacy-format.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1641988800">- errinjct: sanitize devspec output of a newline if one is present (bsc#1194579 ltc#195746).
  + errinjct-sanitize-devspec-output-of-a-newline-if-one.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1643284800">- Add HNV wicked support (bsc#1193543 jsc#SLE-18127).
  + 0001-Validate-connection-manager.patch
  + 0002-factor-out-NetworkManager-nmcli-code.patch
  + 0003-Add-new-wicked-functions-from-suse-to-manage-bonding.patch
  + 0004-Support-wicked-HNV-using-new-wicked-interfaces-for.patch
  + 0005-Set-modprobe-bonding-max_bonds-0-option.patch
  + 0006-cleanup-hcnmgr-distro-and-service-detection.patch
  + 0007-Remove-wicked-ifup-calls-that-just-run-into-timeouts.patch
  + 0008-add-note-about-comma-in-hcnmgr-BONDOPTIONS.patch
  + 0009-Fix-to-call-wicked-ifreload-directly.patch
  + 0010-Fix-incorrect-parameters-to-suse_ifcfg_bond_create.patch
  + 0011-Fix-comment-about-setting-primary.patch
  + 0012-Description-and-indenting-corrections.patch
  + 0013-adjust-sourcing-path-of-the-functions.suse-library.patch
  + 0014-Enable-the-network-service-checks.patch
  + 0015-add-hcn-init.service.suse-service-covering-wicked.patch
- Install SUSE-specific scripts</changelog>
  <changelog author="msuchanek@suse.com" date="1643803200">- Install smt.state as config file (bsc#1195413 ltc#193325).</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Fix HNV migration and other HNV issues (bsc#1195404 ltc#196259).
  + 0016-functions.suse-fix-suse-wlist-utility-functions.patch
  + 0017-functions.suse-don-t-implicitly-set-primary-to-1st-s.patch
  + 0018-hcnmgr-add-x-option-to-trace-hcnmgr-script-execution.patch
  + 0019-check-platform-service-after-getopts-parsing.patch
  + 0020-call-less-intrusive-ifdown-ifup-in-rmdev_wicked.patch
  + 0021-call-ifup-instead-ifreload-in-config_vdevice_wicked.patch
  + 0022-split-scanhcn-function-into-nm-wicked-variants.patch
  + 0023-hcnmgr-merged-scanhcn_wicked-id-fix-and-comments.patch
  + 0024-Fix-race-with-udev-renaming-and-hcn-configure.patch
  + 0025-hcnmgr-remove-ifcfg-file-dump-from-scanhcn_wicked.patch
  + 0026-hcnmgr-move-sourcing-functions.suse-to-wicked-case.patch
  + 0027-hcnmgr-extend-suse-os-release-match.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645099200">- Update HNV implementation (bsc#1195404 ltc#196259 jsc#SLE-23855).
  + 0001-Validate-connection-manager-and-add-option-to-trace-.patch
  + 0002-Factor-out-NetworkManager-nmcli-code.patch
  * 0003-Add-new-wicked-functions-from-suse-to-manage-bonding.patch
  + 0004-Support-wicked-HNV-using-new-wicked-functions-for-bo.patch
  + 0005-hcnmgr-maintain-hcnid-state-for-later-cleanup.patch
  + 0006-Add-hcn-init.service.suse.patch
  - 0001-Validate-connection-manager.patch
  - 0002-factor-out-NetworkManager-nmcli-code.patch
  - 0004-Support-wicked-HNV-using-new-wicked-interfaces-for.patch
  - 0005-Set-modprobe-bonding-max_bonds-0-option.patch
  - 0006-cleanup-hcnmgr-distro-and-service-detection.patch
  - 0007-Remove-wicked-ifup-calls-that-just-run-into-timeouts.patch
  - 0008-add-note-about-comma-in-hcnmgr-BONDOPTIONS.patch
  - 0009-Fix-to-call-wicked-ifreload-directly.patch
  - 0010-Fix-incorrect-parameters-to-suse_ifcfg_bond_create.patch
  - 0011-Fix-comment-about-setting-primary.patch
  - 0012-Description-and-indenting-corrections.patch
  - 0013-adjust-sourcing-path-of-the-functions.suse-library.patch
  - 0014-Enable-the-network-service-checks.patch
  - 0015-add-hcn-init.service.suse-service-covering-wicked.patch
  - 0016-functions.suse-fix-suse-wlist-utility-functions.patch
  - 0017-functions.suse-don-t-implicitly-set-primary-to-1st-s.patch
  - 0018-hcnmgr-add-x-option-to-trace-hcnmgr-script-execution.patch
  - 0019-check-platform-service-after-getopts-parsing.patch
  - 0020-call-less-intrusive-ifdown-ifup-in-rmdev_wicked.patch
  - 0021-call-ifup-instead-ifreload-in-config_vdevice_wicked.patch
  - 0022-split-scanhcn-function-into-nm-wicked-variants.patch
  - 0023-hcnmgr-merged-scanhcn_wicked-id-fix-and-comments.patch
  - 0024-Fix-race-with-udev-renaming-and-hcn-configure.patch
  - 0025-hcnmgr-remove-ifcfg-file-dump-from-scanhcn_wicked.patch
  - 0026-hcnmgr-move-sourcing-functions.suse-to-wicked-case.patch
  - 0027-hcnmgr-extend-suse-os-release-match.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645099201">- lparstat: report LPAR name from lparcfg (bsc#1187716 ltc#193451).
  + lparstat-report-LPAR-name-from-lparcfg.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645790400">- Fix setting HNV primary slave with NM (bsc#1195404 ltc#196259).
  - 0007-Fix-NM-HNV-setting-primary-slave.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645790401">- Fix lsslot showing "Unknown slot type" for recent PCIe slot types (bsc#1196411 ltc#196505).
  - lsslot-Add-new-DRC-type-description-strings.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1655294400">- Update to upstream version 1.3.10
  * ppc64_cpu: Add support to parse PAPR information for energy and frequency (bsc#1200465 ltc#197256 jsc#SLE-18129 jsc#PED-519)
  * powerpc-utils: Enhance error message when lparstat -E fails on max config systems (bsc#1198956 ltc#196850)
  * drmgr: Add support for 'acc' command (jsc#SLE-18644)
  * hcn-init.service: Add RemainAfterExit=yes
  * man/drmgr: fix multiple typos
  * hcnmgr: Add new feature "wicked" in HNV FEATURE list
  * hcnmgr: Update Makefile and powerpc-utils spec file to support HNV and wicked
  * hcnmgr: Fix NM HNV setting primary slave
  * hcnmgr: Add hcn-init.service.suse
  * hcnmgr: maintain hcnid state for later cleanup
  * hcnmgr: Support wicked HNV using new wicked functions for bonding
  * hcnmgr: Add new wicked functions for SuSE to manage bonding
  * hcnmgr: Factor out NetworkManager nmcli code
  * hcnmgr: Validate connection manager and add tracing option
  * bootlist: fix invalid hex number message
  * bootlist: fix passing -l flag to kpartx as -p delimiter value
  * lsslot: fix memory leak when listing IO slots
  * lsslot: Add new DRC type description strings for latest PCIe slot types
  * lparstat: report LPAR name from lparcfg
  * errinjct: sanitize devspec output of a newline if one is present
  * lparstat: Fix reported online memory in legacy format
  * ofpathname: Add support for NVMf devices
  * ofpathname: Fix nvme support in ANA mode
  * hcnmgr: Support vNIC as backup device
  * hcnmgr: Avoid hexdump squeezing consecutive identical bytes.
  * lsdevinfo: optimize criteria filtering
  * Remove upstreamed patches
  - lsdevinfo-optimize-criteria-filtering.patch
  - hcnmgr-Avoid-hexdum-squeezing-consecutive-identical-.patch
  - 0001-hcnmgr-Support-vNIC-as-backup-device.patch
  - 0002-hcnmgr-Remove-some-dead-code.patch
  - 0003-ofpathname-Fix-nvme-support-in-ANA-mode.patch
  - 0004-ofpathname-Add-support-for-NVMf-devices.patch
  - lparstat-Fix-reported-online-memory-in-legacy-format.patch
  - errinjct-sanitize-devspec-output-of-a-newline-if-one.patch
  - lparstat-report-LPAR-name-from-lparcfg.patch
  - lsslot-Add-new-DRC-type-description-strings.patch
  - 0001-Validate-connection-manager-and-add-option-to-trace-.patch
  - 0002-Factor-out-NetworkManager-nmcli-code.patch
  - 0003-Add-new-wicked-functions-from-suse-to-manage-bonding.patch
  - 0004-Support-wicked-HNV-using-new-wicked-functions-for-bo.patch
  - 0005-hcnmgr-maintain-hcnid-state-for-later-cleanup.patch
  - 0006-Add-hcn-init.service.suse.patch
  - 0007-Fix-NM-HNV-setting-primary-slave.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1664884800">- Fix "lsslot -c mem" output when LMB size is set to 4GB (bsc#1202777 ltc#199300)
  + lsslot-Fix-lsslot-c-mem-output-when-using-4GB-LMB-si.patch
  + lsslot-Explicity-declare-that-lmb_address-be-display.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1668427200">- NVMf boot support (bsc#1205351 ltc#200481)
  + bootlist-Add-install-boot-support-for-nvmf-devices.patch
  + ofpathname-Fix-several-issues-in-nvmf-boot-install-s.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1669291200">- nsid of nvmf device needs to be lowercase (bsc#1205697 ltc#200594)
  + ofpathname-Handle-nsid-as-hex-in-nvmf-boot-install-s.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1669809600">- Support multiple dev paths for a nvmf boot device (bsc#1205696 ltc#200595)
  + Support-multiple-dev-paths-for-a-nvmf-boot-device.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="msuchanek@suse.com" date="1672660800">- Fix lparstat cpu mode display in a dedicated-donating LPAR (bsc#1206518 ltc#200949)
  + lparstat-Fix-display-of-mode-for-dedicated-donating-.patch
- Fix cpu utilization display
  + lparstat-Fix-array-overflow-issue.patch
- Fix setting primaty HNV link when using NM
  + hcnmgr-Fix-setting-primary-slave-across-reboots.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1674648000">- Update to version 1.3.11 (jsc#PED-560)
  - Add support for drmgr hooks.
- Drop upstreamed patches
  - Support-multiple-dev-paths-for-a-nvmf-boot-device.patch
  - bootlist-Add-install-boot-support-for-nvmf-devices.patch
  - hcnmgr-Fix-setting-primary-slave-across-reboots.patch
  - lparstat-Fix-array-overflow-issue.patch
  - lparstat-Fix-display-of-mode-for-dedicated-donating-.patch
  - lsslot-Explicity-declare-that-lmb_address-be-display.patch
  - lsslot-Fix-lsslot-c-mem-output-when-using-4GB-LMB-si.patch
  - ofpathname-Fix-several-issues-in-nvmf-boot-install-s.patch
  - ofpathname-Handle-nsid-as-hex-in-nvmf-boot-install-s.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1685966400">- Fix negative utilization value reported by lparstat -E (bsc#1212031)
  + lparstat-Fix-negative-values-seen-while-running-lpar.patch
- Fix lparstat error with mixed SMT state (bsc#1211883 ltc#02144)
  + lparstat-report-mixed-SMT-state.patch
  + lparstat-Fix-offline-threads-uninitialized-entries.patch</changelog>
</package>
<package pkgid="ca890b04277571182c46109b25333a025519e60cec3d0095716f7a29179b0ce9" name="powerpc-utils" arch="src">
  <version epoch="0" ver="1.3.11" rel="150500.3.3.1"/>
  <changelog author="msuchanek@suse.de" date="1635508800">- Avoid error with HCN IDs containing same consecutive bytes (bsc#1192095 ltc#194963).
  + hcnmgr-Avoid-hexdum-squeezing-consecutive-identical-.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1641384000">- Add support for vnic backup device for HNV (jsc#SLE-23097).
  + 0001-hcnmgr-Support-vNIC-as-backup-device.patch
  + 0002-hcnmgr-Remove-some-dead-code.patch
- Add support for NVMf devices (jsc#SLE-18643, bsc#1198728, ltc#197650).
  + 0003-ofpathname-Fix-nvme-support-in-ANA-mode.patch
  + 0004-ofpathname-Add-support-for-NVMf-devices.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1641384001">- Fix reported online memory in legacy format (bsc#1191147).
  + lparstat-Fix-reported-online-memory-in-legacy-format.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1641988800">- errinjct: sanitize devspec output of a newline if one is present (bsc#1194579 ltc#195746).
  + errinjct-sanitize-devspec-output-of-a-newline-if-one.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1643284800">- Add HNV wicked support (bsc#1193543 jsc#SLE-18127).
  + 0001-Validate-connection-manager.patch
  + 0002-factor-out-NetworkManager-nmcli-code.patch
  + 0003-Add-new-wicked-functions-from-suse-to-manage-bonding.patch
  + 0004-Support-wicked-HNV-using-new-wicked-interfaces-for.patch
  + 0005-Set-modprobe-bonding-max_bonds-0-option.patch
  + 0006-cleanup-hcnmgr-distro-and-service-detection.patch
  + 0007-Remove-wicked-ifup-calls-that-just-run-into-timeouts.patch
  + 0008-add-note-about-comma-in-hcnmgr-BONDOPTIONS.patch
  + 0009-Fix-to-call-wicked-ifreload-directly.patch
  + 0010-Fix-incorrect-parameters-to-suse_ifcfg_bond_create.patch
  + 0011-Fix-comment-about-setting-primary.patch
  + 0012-Description-and-indenting-corrections.patch
  + 0013-adjust-sourcing-path-of-the-functions.suse-library.patch
  + 0014-Enable-the-network-service-checks.patch
  + 0015-add-hcn-init.service.suse-service-covering-wicked.patch
- Install SUSE-specific scripts</changelog>
  <changelog author="msuchanek@suse.com" date="1643803200">- Install smt.state as config file (bsc#1195413 ltc#193325).</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Fix HNV migration and other HNV issues (bsc#1195404 ltc#196259).
  + 0016-functions.suse-fix-suse-wlist-utility-functions.patch
  + 0017-functions.suse-don-t-implicitly-set-primary-to-1st-s.patch
  + 0018-hcnmgr-add-x-option-to-trace-hcnmgr-script-execution.patch
  + 0019-check-platform-service-after-getopts-parsing.patch
  + 0020-call-less-intrusive-ifdown-ifup-in-rmdev_wicked.patch
  + 0021-call-ifup-instead-ifreload-in-config_vdevice_wicked.patch
  + 0022-split-scanhcn-function-into-nm-wicked-variants.patch
  + 0023-hcnmgr-merged-scanhcn_wicked-id-fix-and-comments.patch
  + 0024-Fix-race-with-udev-renaming-and-hcn-configure.patch
  + 0025-hcnmgr-remove-ifcfg-file-dump-from-scanhcn_wicked.patch
  + 0026-hcnmgr-move-sourcing-functions.suse-to-wicked-case.patch
  + 0027-hcnmgr-extend-suse-os-release-match.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645099200">- Update HNV implementation (bsc#1195404 ltc#196259 jsc#SLE-23855).
  + 0001-Validate-connection-manager-and-add-option-to-trace-.patch
  + 0002-Factor-out-NetworkManager-nmcli-code.patch
  * 0003-Add-new-wicked-functions-from-suse-to-manage-bonding.patch
  + 0004-Support-wicked-HNV-using-new-wicked-functions-for-bo.patch
  + 0005-hcnmgr-maintain-hcnid-state-for-later-cleanup.patch
  + 0006-Add-hcn-init.service.suse.patch
  - 0001-Validate-connection-manager.patch
  - 0002-factor-out-NetworkManager-nmcli-code.patch
  - 0004-Support-wicked-HNV-using-new-wicked-interfaces-for.patch
  - 0005-Set-modprobe-bonding-max_bonds-0-option.patch
  - 0006-cleanup-hcnmgr-distro-and-service-detection.patch
  - 0007-Remove-wicked-ifup-calls-that-just-run-into-timeouts.patch
  - 0008-add-note-about-comma-in-hcnmgr-BONDOPTIONS.patch
  - 0009-Fix-to-call-wicked-ifreload-directly.patch
  - 0010-Fix-incorrect-parameters-to-suse_ifcfg_bond_create.patch
  - 0011-Fix-comment-about-setting-primary.patch
  - 0012-Description-and-indenting-corrections.patch
  - 0013-adjust-sourcing-path-of-the-functions.suse-library.patch
  - 0014-Enable-the-network-service-checks.patch
  - 0015-add-hcn-init.service.suse-service-covering-wicked.patch
  - 0016-functions.suse-fix-suse-wlist-utility-functions.patch
  - 0017-functions.suse-don-t-implicitly-set-primary-to-1st-s.patch
  - 0018-hcnmgr-add-x-option-to-trace-hcnmgr-script-execution.patch
  - 0019-check-platform-service-after-getopts-parsing.patch
  - 0020-call-less-intrusive-ifdown-ifup-in-rmdev_wicked.patch
  - 0021-call-ifup-instead-ifreload-in-config_vdevice_wicked.patch
  - 0022-split-scanhcn-function-into-nm-wicked-variants.patch
  - 0023-hcnmgr-merged-scanhcn_wicked-id-fix-and-comments.patch
  - 0024-Fix-race-with-udev-renaming-and-hcn-configure.patch
  - 0025-hcnmgr-remove-ifcfg-file-dump-from-scanhcn_wicked.patch
  - 0026-hcnmgr-move-sourcing-functions.suse-to-wicked-case.patch
  - 0027-hcnmgr-extend-suse-os-release-match.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645099201">- lparstat: report LPAR name from lparcfg (bsc#1187716 ltc#193451).
  + lparstat-report-LPAR-name-from-lparcfg.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645790400">- Fix setting HNV primary slave with NM (bsc#1195404 ltc#196259).
  - 0007-Fix-NM-HNV-setting-primary-slave.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1645790401">- Fix lsslot showing "Unknown slot type" for recent PCIe slot types (bsc#1196411 ltc#196505).
  - lsslot-Add-new-DRC-type-description-strings.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1655294400">- Update to upstream version 1.3.10
  * ppc64_cpu: Add support to parse PAPR information for energy and frequency (bsc#1200465 ltc#197256 jsc#SLE-18129 jsc#PED-519)
  * powerpc-utils: Enhance error message when lparstat -E fails on max config systems (bsc#1198956 ltc#196850)
  * drmgr: Add support for 'acc' command (jsc#SLE-18644)
  * hcn-init.service: Add RemainAfterExit=yes
  * man/drmgr: fix multiple typos
  * hcnmgr: Add new feature "wicked" in HNV FEATURE list
  * hcnmgr: Update Makefile and powerpc-utils spec file to support HNV and wicked
  * hcnmgr: Fix NM HNV setting primary slave
  * hcnmgr: Add hcn-init.service.suse
  * hcnmgr: maintain hcnid state for later cleanup
  * hcnmgr: Support wicked HNV using new wicked functions for bonding
  * hcnmgr: Add new wicked functions for SuSE to manage bonding
  * hcnmgr: Factor out NetworkManager nmcli code
  * hcnmgr: Validate connection manager and add tracing option
  * bootlist: fix invalid hex number message
  * bootlist: fix passing -l flag to kpartx as -p delimiter value
  * lsslot: fix memory leak when listing IO slots
  * lsslot: Add new DRC type description strings for latest PCIe slot types
  * lparstat: report LPAR name from lparcfg
  * errinjct: sanitize devspec output of a newline if one is present
  * lparstat: Fix reported online memory in legacy format
  * ofpathname: Add support for NVMf devices
  * ofpathname: Fix nvme support in ANA mode
  * hcnmgr: Support vNIC as backup device
  * hcnmgr: Avoid hexdump squeezing consecutive identical bytes.
  * lsdevinfo: optimize criteria filtering
  * Remove upstreamed patches
  - lsdevinfo-optimize-criteria-filtering.patch
  - hcnmgr-Avoid-hexdum-squeezing-consecutive-identical-.patch
  - 0001-hcnmgr-Support-vNIC-as-backup-device.patch
  - 0002-hcnmgr-Remove-some-dead-code.patch
  - 0003-ofpathname-Fix-nvme-support-in-ANA-mode.patch
  - 0004-ofpathname-Add-support-for-NVMf-devices.patch
  - lparstat-Fix-reported-online-memory-in-legacy-format.patch
  - errinjct-sanitize-devspec-output-of-a-newline-if-one.patch
  - lparstat-report-LPAR-name-from-lparcfg.patch
  - lsslot-Add-new-DRC-type-description-strings.patch
  - 0001-Validate-connection-manager-and-add-option-to-trace-.patch
  - 0002-Factor-out-NetworkManager-nmcli-code.patch
  - 0003-Add-new-wicked-functions-from-suse-to-manage-bonding.patch
  - 0004-Support-wicked-HNV-using-new-wicked-functions-for-bo.patch
  - 0005-hcnmgr-maintain-hcnid-state-for-later-cleanup.patch
  - 0006-Add-hcn-init.service.suse.patch
  - 0007-Fix-NM-HNV-setting-primary-slave.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1664884800">- Fix "lsslot -c mem" output when LMB size is set to 4GB (bsc#1202777 ltc#199300)
  + lsslot-Fix-lsslot-c-mem-output-when-using-4GB-LMB-si.patch
  + lsslot-Explicity-declare-that-lmb_address-be-display.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1668427200">- NVMf boot support (bsc#1205351 ltc#200481)
  + bootlist-Add-install-boot-support-for-nvmf-devices.patch
  + ofpathname-Fix-several-issues-in-nvmf-boot-install-s.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1669291200">- nsid of nvmf device needs to be lowercase (bsc#1205697 ltc#200594)
  + ofpathname-Handle-nsid-as-hex-in-nvmf-boot-install-s.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1669809600">- Support multiple dev paths for a nvmf boot device (bsc#1205696 ltc#200595)
  + Support-multiple-dev-paths-for-a-nvmf-boot-device.patch</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="msuchanek@suse.com" date="1672660800">- Fix lparstat cpu mode display in a dedicated-donating LPAR (bsc#1206518 ltc#200949)
  + lparstat-Fix-display-of-mode-for-dedicated-donating-.patch
- Fix cpu utilization display
  + lparstat-Fix-array-overflow-issue.patch
- Fix setting primaty HNV link when using NM
  + hcnmgr-Fix-setting-primary-slave-across-reboots.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1674648000">- Update to version 1.3.11 (jsc#PED-560)
  - Add support for drmgr hooks.
- Drop upstreamed patches
  - Support-multiple-dev-paths-for-a-nvmf-boot-device.patch
  - bootlist-Add-install-boot-support-for-nvmf-devices.patch
  - hcnmgr-Fix-setting-primary-slave-across-reboots.patch
  - lparstat-Fix-array-overflow-issue.patch
  - lparstat-Fix-display-of-mode-for-dedicated-donating-.patch
  - lsslot-Explicity-declare-that-lmb_address-be-display.patch
  - lsslot-Fix-lsslot-c-mem-output-when-using-4GB-LMB-si.patch
  - ofpathname-Fix-several-issues-in-nvmf-boot-install-s.patch
  - ofpathname-Handle-nsid-as-hex-in-nvmf-boot-install-s.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1685966400">- Fix negative utilization value reported by lparstat -E (bsc#1212031)
  + lparstat-Fix-negative-values-seen-while-running-lpar.patch
- Fix lparstat error with mixed SMT state (bsc#1211883 ltc#02144)
  + lparstat-report-mixed-SMT-state.patch
  + lparstat-Fix-offline-threads-uninitialized-entries.patch</changelog>
</package>
<package pkgid="314e53cad091bbb792bc6bac4f8d14a5947b40bf4b01f48abfb4ff57f0f15bc7" name="protobuf" arch="src">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="48e0df743beb74ce9a38eb6ae1012d0394cf0b7565d243a4db81ab744d83466c" name="protobuf-devel" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="8ca4feb506dfb04a9022bbdb6d8b539f93fbebb255ecb069e6b708e9e731ae91" name="protobuf-devel" arch="ppc64le">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="d9b577fa1944cede82d70333bf1052905af79a56e0bb8cfb3931899a018b2de8" name="protobuf-devel" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="1ce37af2ea8b58fcb231ccf595a7b9cb055e77bbba86d73b5a09df26f42e0320" name="protobuf-devel" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="ef6f5943493d81a00b356c72aa54c8a49d1772d4e77852fec00d2085d1ac9e30" name="protobuf-java" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="923b2ce02e6639d1144f030e2fc0f67ff978dafb7c9a8eb3be7b08e187989c56" name="protobuf-java" arch="ppc64le">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="a233ed5cbb8f5f7b7e6b6b19d7c92ca250605f3e94204ca1d1eb206fadf2403e" name="protobuf-java" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="af20b9f465e64472a05eacdd62575f09b486978147b8587335b19e4858340b47" name="protobuf-java" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="0034ba55c6b689b0996a2cb478ee85e46a793e7914eae304c3f2ec38d04ca28a" name="protobuf-source" arch="noarch">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="4e8aba7b04e73e8941ea29d4883a0dbec7f4779c7c5a68b93f01bce21881744e" name="python-jmespath" arch="src">
  <version epoch="0" ver="0.9.3" rel="150000.3.3.4"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="b07c5c7a36629404a38b70df79a29e1052d9f332ad1be01670213a13f2ed12c0" name="python-looseversion" arch="src">
  <version epoch="0" ver="1.0.2" rel="150100.3.3.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="a4c436278facb61425dc28d45336ef15d6ce1b086acdb83715f74de583c2278e" name="python-ply" arch="src">
  <version epoch="0" ver="3.10" rel="150000.3.3.4"/>
  <changelog author="maw@suse.de" date="1176465600">- Initial import into the build service
- Rename ply.spec to python-ply.spec as that is what the resultant
  package is called.</changelog>
  <changelog author="maw@suse.de" date="1193140800">- Don't build as noarch.</changelog>
  <changelog author="maw@suse.de" date="1205755200">- Import into autobuild
- Add a -doc subpackage
- Add python-ply-shebangs.patch</changelog>
  <changelog author="maw@suse.de" date="1217246400">- Update to version 2.5:
  + Various bug fixes
  + Some performance improvements
  + For a blow-by-blow account of changes, see the file CHANGES
    in the package python-ply-doc.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- Use new python macros</changelog>
  <changelog author="coolo@novell.com" date="1284465600">- Update to 3.3:
  + PLY-3.3 is a minor bug fix release, it supports both Python 2
    and Python 3.
- License changed to BSD</changelog>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="0b6a1f05aff815789b4773027689051cabcf0ee62aa112e02a3b64d1fce44e13" name="python-ply-doc" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.3.4"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="e71b500e39c7fb1f660e94ee1d56b215f2a94d5de9cda0d89c0523ff5812ed61" name="python-pyzmq" arch="src">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="speilicke@suse.com" date="1364385600">- Update to version 13.0.0:
  + PyPy support
  + The Threadsafe ZMQStream experiment in 2.2.0.1 was deemed inappropriate and not useful,
    and has been removed.
  + The zmq.web experiment has been removed, to be developed as a standalone project
  + Fixes bnc#811890
- Add rpmlintrc
- Drop useless macros
- Run testsuite</changelog>
  <changelog author="cfarrell@suse.com" date="1365163200">- license update: LGPL-3.0+ and BSD-3-Clause
  the core is LGPL-3.0+ but most of what is outside the code is
  BSD-3-Clause</changelog>
  <changelog author="toddrme2178@gmail.com" date="1365768000">- Changes suggests to recommends since there is no way to install suggets currently</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 14.0.0
  + Update bundled libzmq to current (4.0.1).
  + Backends are now implemented in ``zmq.backend`` instead of ``zmq.core``.
    This has no effect on public APIs.
  + Various build improvements for Cython and CFFI backends (PyPy
    compiles at build time).
  + Various GIL-related performance improvements - the GIL is no longer
    touched from a zmq IO thread.
  + Adding a constant should now be a bit easier - only zmq/sugar/constant
  _names should need updating,
    all other constant-related files should be automatically updated by
    ``setup.py constants``.
  + add support for latest libzmq-4.0.1
    (includes ZMQ_CURVE security and socket event monitoring).
- Changes from version 13.1.0
  + The main new feature is improved tornado 3 compatibility.
    PyZMQ ships a 'minitornado' submodule, which contains a small
    subset of tornado 3.0.1,
    in order to get the IOLoop base class.  zmq.eventloop.ioloop.IOLoop
    is now a simple subclass, and if the system tornado is ≥ 3.0, then
    the zmq IOLoop is a proper registered subclass of the tornado one itself,
    and minitornado is entirely unused.
- Changes from version 13.0.2
  + EAGAIN was unconditionally turned into KeyboardInterrupt
  + fix use of totally deprecated ctypes_configure to generate constants in CFFI backend
  + fix memory leak in CFFI backend for PyPy
  + typo prevented IPC_PATH_MAX_LEN from ever being defined
  + various build fixes - linking with librt, Cython compatibility, etc.</changelog>
  <changelog author="dmueller@suse.com" date="1392206400">- disable testsuite for qemu-linux-user builds</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1412164800">- Update to 14.3.1
  + Minor bugfixes to pyzmq 14.3:
  * Fixes to building bundled libzmq on OS X &lt; 10.9
  * Fixes to import-failure warnings on Python 3.4
  * Fixes to tests
  * Pull upstream fixes to zmq.ssh for ssh multiplexing
- Update to 14.3.0
  + PyZMQ no longer calls :meth:`.Socket.close` or
    :meth:`.Context.term` during process cleanup.
    Changes to garbage collection in Python 3.4 make this
    impossible to do sensibly.
  + :meth:`ZMQStream.close` closes its socket immediately,
    rather than scheduling a timeout.
  + Raise the original ImportError when importing zmq fails.
    Should be more informative than `no module cffi...`.
- Update to 14.2.0
  + New Stuff
  * Raise new ZMQVersionError when a requested method is not
    supported by the linked libzmq.
    For backward compatibility, this subclasses
    NotImplementedError.
  + Bugs Fixed
  * Memory leak introduced in pyzmq-14.0 in zero copy.
  * OverflowError on 32 bit systems in zero copy.
- Update to 14.1.0
  + Security
    The headline features for 14.1 are adding better support for
    libzmq's security features.
  * When libzmq is bundled as a Python extension
    (e.g. wheels, eggs), libsodium is also bundled
    (excluding Windows), ensuring that libzmq security is
    available to users who install from wheels
  * New :mod:`zmq.auth`, implementing zeromq's ZAP authentication,
    modeled on czmq zauth.
    For more information, see the
    `examples &lt;https://github.com/zeromq/pyzmq/tree/master/examples/&gt;`_.
  + Other New Stuff
  * Add PYZMQ_BACKEND for enabling use of backends outside the
    pyzmq codebase.
  * Add :attr:`~.Context.underlying` property and
    :meth:`~.Context.shadow` method to Context and Socket, for
    handing off sockets and contexts. between pyzmq and other
    bindings (mainly pyczmq_).
  * Add TOS, ROUTER_HANDOVER, and IPC_FILTER constants from
    libzmq-4.1-dev.
  * Add Context option support in the CFFI backend.
  * Various small unicode and build fixes, as always.
  * :meth:`~.Socket.send_json` and :meth:`~.Socket.recv_json`
    pass any extra kwargs to ``json.dumps/loads``.
  + Deprecations
  * ``Socket.socket_type`` is deprecated, in favor of
    ``Socket.type``, which has been available since 2.1.
- Update to 14.0.1
  + Bugfix release
  * Update bundled libzmq to current (4.0.3).
  * Fix bug in :meth:`.Context.destroy` with no open sockets.
  * Threadsafety fixes in the garbage collector.
  * Python 3 fixes in :mod:`zmq.ssh`.</changelog>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="cfa39544fc3efb33810ca4b162bb10b24f1d8eb70c5a009fd18ec2f5736014df" name="python-reportlab" arch="src">
  <version epoch="0" ver="3.4.0" rel="150000.3.9.1"/>
  <changelog author="alexandre@exatati.com.br" date="1264075200">- Update to 2.4.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1302609600">- Update to 2.5:
  - Please readme CHANGES.txt.
- Regenerate spec file with py2pack;
- Add CHANGES.txt and README.txt files as documentation;
- Bzip2 source code.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1306756800">- Add Provides and Obsoletes to python-ReportLab in spec file to
  better behaviour in 11.1.</changelog>
  <changelog author="saschpe@suse.de" date="1316520000">- Fix non-executable bit rpmlint warning</changelog>
  <changelog author="coolo@suse.com" date="1323345600">- fix license to be in spdx.org format</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947200">- Clean up spec file</changelog>
  <changelog author="p.drouand@gmail.com" date="1359028800">- Update to version 2.6:
  * General changes
  - Manuals have been reformatted with more pleasing code snippets and tables of
    contents, and reviewed and expanded
  * Flowing documents (Platypus):
  - Added support for HTML-style list objects
  - Added flexible mechanism for drawing bullets
  - Allowed XPreformatted objects to use Asian line wrapping
  - Added an 'autoNextPageTemplate' attribute to PageTemplates.  For example you
    can now set up a 'chapter first page template' which will always be followed
    by a 'continuation template' on the next page break, saving the programmer from
    having to issue control flow commands in the story.
  - added a TopPadder flowable, which will 'wrap' another Flowable and move it
    to the bottom of the current page.
  - More helpful error messages when large tables cannot be rendered
  - Documentation for images within text (test_032_images)
  - Trailing dots for use on contents pages
  * Charts and graphics:
  - Support for UPCA bar codes
  - We now have a semi-intelligent system for labelling pie charts with
    callout lines.  Thanks to James Martin-Collar, a maths student at Warwick
    University, who did this as his summer internship.
  - Axes - added startOffset and endOffset properties; allowed for axis
    background annotations.
  - Bar charts - allow more control of z Index (i.e. drawing order of axes and
    lines)
  - Pie charts - fixed bugs in 3d appearance
  - SVG output back end has seen some bugs fixed and now outputs resizeable SVG</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 2.7
  + No relative ChangeLog entry</changelog>
  <changelog author="kkaempf@suse.com" date="1385294401">- Update to version 2.7
  * Charts / graphics enhancements
  - Added SimpleTimeSeriesPlot
  - added _computeMaxSpace
  - added in lineStyle (for bars)
  - improved SVG rendering
  - Pie Chart now has an `innerRadiusFraction` to allow doughnut-like
    appearance for 2d charts
  * Charts/graphics bug fixes
  - piecharts.py: fix Pie3d __init__ to call its superclass
  - linecharts.py: fix swatch creation
  - fixed `y` axis in the simple time series plot
  * PDF
  - Fixes to testshapes &amp; pdfform resetting
  - colors.py
  - various minor fixes
  * Platypus
  - Defined a small bullet rather than a big circle as the default for unordered lists
  - fixed attribute spelling bug
  - fixed CJK + endDots</changelog>
  <changelog author="kkaempf@suse.com" date="1433505600">- Update to 3.0
  * ReportLab 3.0 now supports Python 2.7, 3.3 and higher.
  * There has been a substantial internal rewrite to ensure
    consistent use of unicode strings for natural-language text,
    and of bytes for all file format internals.
  * Python 3.x compatibility
  * New features
  - Add ability to output greyscale and 1-bit PIL images without
    conversion to RGB. (contributed by Matthew Duggan)
  - highlight annotation (contributed by Ben Echols)
  * Other
  - numerous very minor fixes, visible through BitBucket.</changelog>
  <changelog author="kkaempf@suse.com" date="1433505601">- Update to 3.1
  * support for emoji
  * improved pip-based installers</changelog>
  <changelog author="kkaempf@suse.com" date="1433505602">- Update to 3.2.0
  * Added proportional underlining specific to font sizes, set via
    the `underlineProportion` attribute of ParagraphStyles.
  * TrueType fonts: added support for cmaps 10 &amp; 13
  * DocTemplate class now supports a boolean `displayDocTitle` argument.
  * TableofContents now supports a formatter argument to allow
    formatting of the displayed page numbers (eg for appendices etc).
  * Table `repeatRows` can now be a tuple of row numbers to allow
    incomplete ranges of rows to be repeated.
  * Tables now do pass instance.`spaceBefore` &amp; `spaceAfter` to
    their split children when split
  * Several strangenesses were fixed in the pdfbase.pdfform module;
    Multiple usage is now allowed.
  * Error message fixes
  * Various environment fixes for Google Application Environment
  * Resource fixes
  * PDFDoc can now set the `Lang` attribute
  * canvas.drawString and similar now allow the character spacing
    to be set
  * Index of accented stuff has been improved
  * RTL code was improved
  * fix Propertyset.clone
  * `flowables.py`: fix ImageAndFlowables so it avoids testing
    negative availableWidth</changelog>
  <changelog author="freitag@opensuse.org" date="1446897600">- Fixed source download link.</changelog>
  <changelog author="dmueller@suse.com" date="1459252800">- install LICENSE.txt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Update to 3.4.0
  * We now support SVG as a format for embedded vector graphics.
  * The &lt;barCodeFlowable&gt; and &lt;barCode&gt; tags now support additional
    encodings.
  * We have considerably expanded our support for fillable forms
    within PDF files. The &lt;textField&gt; tag has many more attributes
    &lt;checkboxField&gt;, &lt;radioField&gt;, &lt;choiceField&gt; &amp; &lt;listboxField&gt;
    which along with the new &lt;textField&gt; make possible PDF forms.
  * The &lt;ul&gt; &amp; &lt;ol&gt; tags now support automatic style change for the
    start/type parameter, by using a space separated list fo start
    values
- Implement single-spec version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="jmatejek@suse.com" date="1500984000">- drop-requirements.patch: do not list setuptools and pip in egg-info
  as requirements
  (fixes bsc#1049516, upstream issue https://bitbucket.org/rptlab/reportlab/issues/113 )
- set LANG variable correctly to help with test suite
  * note that test suite is broken, multiple tests fail and this does not stop build
  * causes of failure are spurious though</changelog>
  <changelog author="mcepl@suse.com" date="1579694400">- Add make_toColor_safe.patch fixing bsc#1154370 (CVE-2019-17626)
  restrict reportlab.lib.color.toColor to protect against unsafe
  input.
- Rebase other patches: drop-requirements.patch and
  reportlab-missing-includes.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628078400">- Add CVE-2020-28463_fix_ssrf.patch fixing bsc#1182503
  (CVE-2020-28463) fix SSRF in img tags.
- Refresh make_toColor_safe.patch</changelog>
  <changelog author="mcepl@suse.com" date="1686312000">- Add CVE-2023-33733-code-injection.patch (CVE-2023-33733,
  bsc#1212065) avoiding arbitrary code execution via supplying a
  crafted PDF file (patches from
  https://hg.reportlab.com/hg-public/reportlab/raw-rev/324a3d0392d5
  and https://hg.reportlab.com/hg-public/reportlab/raw-rev/5b56ae4f05ee)</changelog>
</package>
<package pkgid="b6d66060b7065a8f0ce4c85d6148307a3f5af0048fcf914f27cc2b758303e5b6" name="python-simplejson" arch="src">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
  <changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
  <changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="66519f2723ae6ed9d557d148ade8162c73a17930b7ef3350e7b07797f2e9d4c5" name="python-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="1a419276a61edd4bf5b5f03bda0e9b78ce9a6d8310af574299826a7c8f50ae11" name="python-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="8ab86d846aff4a0befcc9c03b378e3f51da571391a21709ca7bd7ceacbd3796b" name="python-solv" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="fd8a9e5433a9059e9379d55c08ed69428eab47f9590d49516dea349e0e10a84d" name="python-solv" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="1dd34eae9bd0d2f7055e9fbe93c5559d8b96b84f776bef0dc0c02241f1f6d1d8" name="python-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="aa9608f21f52f47666c1a79363b71c1d2e88ae0332d56dd726013db8746c81df" name="python-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="14c6c695fabde311e52941b59d915e8e7b47b1c88e0d71f65531249e827db4b9" name="python-solv" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="1ecbba140d37c53dd5ae80010c26290d7ba60e18d25d844e73f11399b8276bbc" name="python-solv" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="7897b5187522dbb0c3009e05752955f5c4535fb87150a2d10df35b5765a36b8e" name="python-sqlparse" arch="src">
  <version epoch="0" ver="0.4.2" rel="150300.3.6.1"/>
  <changelog author="speilicke@suse.com" date="1383912000">- Initial version</changelog>
  <changelog author="speilicke@suse.com" date="1384516800">- Only ghost /etc/alternatives on 12.3 or newer</changelog>
  <changelog author="ledest@gmail.com" date="1415448000">- fix bashism in pre script</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431518400">- update to version 0.1.15:
  * Fix a regression for identifiers with square brackets notation
    (issue153, by darikg).
  * Add missing SQL types (issue154, issue155, issue156, by
    jukebox).
  * Fix parsing of multi-line comments (issue172, by JacekPliszka).
  * Fix parsing of escaped backslashes (issue174, by caseyching).
  * Fix parsing of identifiers starting with underscore (issue175).
  * Fix misinterpretation of IN keyword (issue183).
  * Improve formatting of HAVING statements.
  * Improve parsing of inline comments (issue163).
  * Group comments to parent object (issue128, issue160).
  * Add double precision builtin (issue169, by darikg).
  * Add support for square bracket array indexing (issue170,
    issue176, issue177 by darikg).
  * Improve grouping of aliased elements (issue167, by darikg).
  * Support comments starting with '#' character (issue178).
- additional changes from version 0.1.14:
  * Floats in UPDATE statements are now handled correctly
    (issue145).
  * Properly handle string literals in comparisons (issue148,
    change proposed by aadis).
  * Fix indentation when using tabs (issue146).
  * Improved formatting in list when newlines precede commas
    (issue140).
- additional changes from version 0.1.13:
  * Fix a regression in handling of NULL keywords introduced in
    0.1.12.
- additional changes from version 0.1.12:
  * Fix handling of NULL keywords in aliased identifiers.
  * Fix SerializerUnicode to split unquoted newlines (issue131, by
    Michael Schuller).
  * Fix handling of modulo operators without spaces (by gavinwahl).
  * Improve parsing of identifier lists containing placeholders.
  * Speed up query parsing of unquoted lines (by Michael Schuller).
- additional changes from version 0.1.11:
  * Fix incorrect parsing of string literals containing line breaks
    (issue118).
  * Fix typo in keywords, add MERGE, COLLECT keywords
    (issue122/124, by Cristian Orellana).
  * Improve parsing of string literals in columns.
  * Fix parsing and formatting of statements containing EXCEPT
    keyword.
  * Fix Function.get_parameters() (issue126/127, by spigwitmer).
  * Classify DML keywords (issue116, by Victor Hahn).
  * Add missing FOREACH keyword.
  * Grouping of BEGIN/END blocks.
  * Python 2.5 isn't automatically tested anymore, neither Travis
    nor Tox still support it out of the box.</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.2.1</changelog>
  <changelog author="tbechtold@suse.com" date="1499860800">- update to 0.2.3:
  * New command line option "--encoding" (by twang2218, pr317).
  * Support CONCURRENTLY keyword (issue322, by rowanseymour).
  * Fix some edge-cases when parsing invalid SQL statements.
  * Fix indentation of LIMIT (by romainr, issue320).
  * Fix parsing of INTO keyword (issue324).
  * Several improvements regarding encodings.
  * Add comma_first option: When splitting list "comma first" notation
  is used (issue141).
  * Fix parsing of incomplete AS (issue284, by vmuriart).
  * Fix parsing of Oracle names containing dollars (issue291).
  * Fix parsing of UNION ALL (issue294).
  * Fix grouping of identifiers containing typecasts (issue297).
  * Add Changelog to sdist again (issue302).
  * `is_whitespace` and `is_group` changed into properties
- convert to singlespec</changelog>
  <changelog author="alarrosa@suse.com" date="1535025600">- Update to 0.2.4:
  * Add more keywords for MySQL table options (pr328, pr333, by phdru).
  * Add more PL/pgSQL keywords (pr357, by Demetrio92).
  * Improve parsing of floats (pr330, by atronah).
  * Fix parsing of MySQL table names starting with digits (issue337).
  * Fix detection of identifiers using comparisons (issue327).
  * Fix parsing of UNION ALL after WHERE (issue349).
  * Fix handling of semicolon in assignments (issue359, issue358).
- Use fdupes and %license
- Remove shebangs from non-executable python files</changelog>
  <changelog author="jayvdb@gmail.com" date="1552392000">- Move fdupes from %check to %install
- Update to v0.3.0
  * Remove support for Python 3.3.
  * New formatting option "--indent_after_first"
  * New formatting option "--indent_columns"
  * Add UPSERT keyword
  * Strip multiple whitespace within parentheses
  * Support double slash (//) comments
  * Support for Calcite temporal keywords
  * Fix occasional IndexError
  * Fix incorrect splitting of strings containing new lines
  * Fix reindent issue for parenthesis
  * Fix from( parsing issue
  * Fix for get_real_name() to return correct name
  * Wrap function params when wrap_after is set
  * Fix parsing of "WHEN name" clauses
  * Add missing EXPLAIN keyword
  * Fix issue with strip_comments causing a syntax error
  * Fix formatting on INSERT which caused staircase effect on values
  * Avoid formatting of psql commands
  * Unify handling of GROUP BY/ORDER BY
  * Remove unnecessary compat shim for bytes</changelog>
  <changelog author="tchvatal@suse.com" date="1555502400">- Use %pytest macro</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to v0.3.1:
  * Add HQL keywords (pr475, by matwalk).
  * Add support for time zone casts (issue489).
  * Enhance formatting of AS keyword (issue507, by john-bodley).
  * Stabilize grouping engine when parsing invalid SQL statements.
  * Fix splitting of SQL with multiple statements inside
    parentheses (issue485, pr486 by win39).
  * Correctly identify NULLS FIRST / NULLS LAST as keywords (issue487).
  * Fix splitting of SQL statements that contain dollar signs in
    identifiers (issue491).
  * Remove support for parsing double slash comments introduced in
    0.3.0 (issue456) as it had some side-effects with other dialects and
    doesn't seem to be widely used (issue476).
  * Restrict detection of alias names to objects that acutally could
    have an alias (issue455, adopted some parts of pr509 by john-bodley).
  * Fix parsing of date/time literals (issue438, by vashek).
  * Fix initialization of TokenList (issue499, pr505 by john-bodley).
  * Fix parsing of LIKE (issue493, pr525 by dbczumar).
  * Improve parsing of identifiers (pr527 by liulk).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1585051200">- Add stdout-encoding-set.patch to use sys.stdout.reconfigure() if
  the stream is an instance of TextIOWrapper to support a pytest change.</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 0.4.1:
  * Python 3.9 support
  * Remove support for end-of-life Python 2.7 and 3.4. Python 3.5+ is now
  required.
  * Remaining strings that only consist of whitespaces are not treated as
  statements anymore. Code that ignored the last element from
  sqlparse.split() should be updated accordingly since that function
  now doesn't return an empty string as the last element in some
  cases (issue496).
- remove non-upstream stdout-encoding-set.patch patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Disable building a python2 flavor so we can build the package
  for Leap/SLE.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1633089600">- update to 0.4.2 (bsc#1190741, CVE-2021-32839):
  * This release fixes a security vulnerability in the strip
    comments filter.
  * Add ELSIF as keyword (issue584).
  * Add CONFLICT and ON_ERROR_STOP keywords.
  * Fix parsing of backticks (issue588).
  * Fix parsing of scientific number (issue399).</changelog>
  <changelog author="mcepl@suse.com" date="1685016000">- Add CVE-2023-30608-ReDOS-parser.patch fixing bsc#1210617
  (CVE-2023-30608) fixing a regular rexpression that is
  vulnerable to ReDOS (Regular Expression Denial of Service)</changelog>
</package>
<package pkgid="553e421609d93103ddf558f265be4b072ed03cce8249920c5f7ecf0d138851bb" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="3bf2ef04e2d42b9cc16754ac6c793a482285a7492d353dd05e556684ee9568cb" name="python3" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="1cbc674ada21cf920f385ac9a48a673623a4412370fc5fcac8b1e2da5cf119c5" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="0402b49dd026dafd3b59efb0f7df16be97be83f39c3d3370dee939f96b824925" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="7cd185ef9c3d2b83b76f7ec2c3596510c7aac3442324ccd796d9cff7fb708852" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="ad3b1891de41a1651638196268490c0ac17c101c0e7acb4bb173d2dc35580386" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="1d5de166e6c3170e9cb32217c44501f2027378b3114c81df5aee5034c005fe4c" name="python3-base" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="ce51f61573ba0f7980b6eaf4c9c4cb2b5da3b7649abb4362b2ddb3d51a757511" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="b3c2043f8cb7670c70b1dcacc41ab26527123809352b89cdfc5dda10c897fa29" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="c5c36d9ec6e441cf35244cab86a05ebc6c6e58b617a01cab94906d7eeaddf5f0" name="python3-clingo" arch="aarch64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="57843914d6537c07cd179e394643869384afbbee8b998e069788189d2745973a" name="python3-clingo" arch="ppc64le">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="5eac937e3a7c917b9b16ab7a41f7fae8acb126579b63eb40a71f4fc0262ab03a" name="python3-clingo" arch="s390x">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="9856550449e90b55c1652e12bfaae6614b6e7cfb301f5bfacebfe4847c94ae6d" name="python3-clingo" arch="x86_64">
  <version epoch="0" ver="5.5.0" rel="150400.4.3.3"/>
  <changelog author="aginies@suse.com" date="1632916800">- first release for SUSE (from fedora spec)</changelog>
  <changelog author="aginies@suse.com" date="1632916801">- fix some build errors, remove unwanted files
- update to version 5.5.0
- clingo is used by default for spack version &gt;= 0.17 (JSC#SLE-22137)</changelog>
  <changelog author="aginies@suse.com" date="1637236800">- create a sub lib package</changelog>
  <changelog author="cgoll@suse.com" date="1639483200">- added python-cffi as Requires (boo#1193712)</changelog>
  <changelog author="eich@suse.com" date="1687348800">- Fix python-cffi dependency in python-clingo (bsc#1212554).</changelog>
</package>
<package pkgid="2c87a813380b52893f8dd3ad497ebe1ba81d493cef322f00c2f74920640615c3" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="45534edc86866e7d541b8cb6a3d7f1caae10b72d4c9ceab28284b845bb11f8c6" name="python3-curses" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="631377d102a97ec891592a23f6b80724836c4182cff33c4cbaf581d67dc65b0a" name="python3-curses" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="d27ff48ceb56b1866210df11509d9b5f985cf720f8e1b5f88aa1a99e2038c9d6" name="python3-curses" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="cad14c89e8a0d3306c5ebd8f986de33ab5e023ddaf4821e37f76e07b7779d170" name="python3-curses" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="b95790e112d4f92450209f7867479acb7607d55afff75e323fbcf0fed3881917" name="python3-dbm" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="ec105369485cc7f59cf6ee07e71ec37cbfe6989f2e17f134533f7fde4fcbb6eb" name="python3-dbm" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="63a7d5de8ddfc10cc043498efefeda35c7898173a7bf4b8d789d441e9a9c8e86" name="python3-dbm" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="4ef16e46a4243f10618b523a5ac37976ec0c882db81ae02a78778f311b6cf57b" name="python3-dbm" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="df9ba1494a6f93a5f7ae2ae40b386d30975b668e9eb6312841e7f58ce2ae6a71" name="python3-devel" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="c0190a5bf80962039cf9c91269382a74a74ab04d7cdd2c515f415e99b0bb3af0" name="python3-devel" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="c22cea66870da3a6ee06a9360329c3b9ae11fa11a75efcce31389a5ccad1fc97" name="python3-devel" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="38cb779c971ff711f20b045a1ed3af95fcd8ffc1c28ab92cdc8876abf18fede9" name="python3-devel" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="3473377ee3fcfe944ce21db88e13131b5e29e9fdb9c295aff873a7eea7a751fa" name="python3-doc" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="810a8d73ca2c879e553c6a305082b45c13d6cc7c713df184c1a57aafd2c1af5f" name="python3-doc" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="60475968a77673a0700749e3c30eb9ede9d92563b939974447007793b10fc5b2" name="python3-doc" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="518a26f56ed3d49ff68f65143697037c978828187b0804fa98d143e7e8e85c6e" name="python3-doc" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="c075021a333050e3939e79ecaa40a386ee3f2f9d26ef850661416482ab45074c" name="python3-doc-devhelp" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="6242d149e1a540b66af08db3c91da7151cfad58737f7afef211cf5e62be9f9e2" name="python3-doc-devhelp" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="9e416c84bc3c738259a6c08b43684c85e6b2bb1ded27f5a2910e2f314197e945" name="python3-doc-devhelp" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="9bd067bb8f234b0b83fecf1a2a442796e2db3b46507a1e3104e845f025bee30f" name="python3-doc-devhelp" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="26e0c089fffd0e2c157a155351ae9305dc1a91dc54b1a4c29e00f8d2268eae84" name="python3-documentation" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="59dc8b7b674eaf09c37ade6c47e42c62cc08e30233c1c8fa7ec594b38bcceebd" name="python3-idle" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="f5b513d2c46c64e757ba79d27b562c4aa53af20f09cc0d14c805425637b9cc3c" name="python3-idle" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="65eb3cef751e7c3e8be4d7c532fc5283fd11b3c176db4ad5220aa0db10f79914" name="python3-idle" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="6a6b9573d2b541079da781d6b2620a32de8101ba2b03873081f0d29e3c9dc35b" name="python3-idle" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="dc91816f99b56d38a8f731509f82ae10bde317347fba9075f7858816d7f6aab3" name="python3-javapackages" arch="noarch">
  <version epoch="0" ver="6.1.0" rel="150200.3.7.1"/>
  <changelog author="fstrba@suse.com" date="1541419200">- Replace the occurences of /usr/lib by libdir in configuration
  files too</changelog>
  <changelog author="fstrba@suse.com" date="1541937600">- Make the javapackages-local package depend on java-devel. It is
  used for package building and this avoids each package to require
  java-devel itself.</changelog>
  <changelog author="fstrba@suse.com" date="1543320000">- Modified patch:
  * suse-use-libdir.patch
    + fix directories for eclipse.conf too</changelog>
  <changelog author="fstrba@suse.com" date="1551700800">- Provide both com.sun:tools and sun.jdk:jconsole that are part of
  standard OpenJDK installation. These provides cannot be generated
  from metadata due to build sequence.</changelog>
  <changelog author="fstrba@suse.com" date="1554292800">- Make the ivy-local and maven-local sub-packages depend on the
  right stuff, so that they actually can be used for building</changelog>
  <changelog author="fstrba@suse.com" date="1554379200">- Split maven-local meta-package out of javapackages-tools spec
  file</changelog>
  <changelog author="fstrba@suse.com" date="1554552000">- Rename gradle-local and ivy-local to javapackages-gradle and
  javapackages-ivy and let them depend only on javapackages-tools
  and javapackages-local. These packages only install files
  produced during the javapackages-tools build. The dependencies
  will be pulled by gradle-local, ivy-local and maven-local
  meta-packages built in a separate spec file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1588680000">- Use %{_rpmmacrodir} instead of %{_libexecdir}/rpm/macros.d: this
  just happens to overlap in some distros.</changelog>
  <changelog author="fstrba@suse.com" date="1594900800">- Upgrade to version 5.3.1
- Modified patch:
  * suse-use-libdir.patch
    + rediff to changed context
- Define _rpmmacrodir for distributions that don't have it</changelog>
  <changelog author="dimstar@opensuse.org" date="1599480000">- when building extra flavor, BuildRequire javapackages-filesystem:
  /etc/java is being cleaned out of the filesystems package.</changelog>
  <changelog author="code@bnavigator.de" date="1605960000">- Support python subpackages for each flavor
  gh#openSUSE/python-rpm-macros#66
- Replace old nose with pytest gh#fedora-java/javapackages#86</changelog>
  <changelog author="code@bnavigator.de" date="1606046400">- Fix the python subpackage generation
  gh#openSUSE/python-rpm-macros#79</changelog>
  <changelog author="code@bnavigator.de" date="1606564800">- Fix typo in spec file sitearch -&gt; sitelib</changelog>
  <changelog author="code@bnavigator.de" date="1616673600">- Can't assume non-existence of python38 macros in Leap.
  gh#openSUSE/python-rpm-macros#107
  Test for suse_version instead. Only Tumbleweed has and needs the
  python_subpackage_only support.</changelog>
  <changelog author="fstrba@suse.com" date="1627387200">- Do not run tests on SLE12, since python3-test is not accessible</changelog>
  <changelog author="david.anes@suse.com" date="1640865600">- Fix typo in suse-use-libdir.patch:
  %{_libdir}/jvm-commmon -&gt; %{_libdir}/jvm-common</changelog>
  <changelog author="fstrba@suse.com" date="1651233600">- Added patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Let maven_depmap.py generate metadata with dependencies under
    certain circumstances</changelog>
  <changelog author="fstrba@suse.com" date="1654257600">- Added patch:
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + remove dependency on python-six for newer distributions</changelog>
  <changelog author="fstrba@suse.com" date="1654430400">- Fix wrong conditioning of the python-six require.</changelog>
  <changelog author="fstrba@suse.com" date="1657195200">- Update to upstream version 6.1.0
  * Release version 6.1.0
  * Introduce common and extra subpackages
  * Update documentation
  * Add lua interpreter to check and GH actions
  * Remove license headers from wrapper scripts
  * Make scripts compatible with rpmlua
  * Add more tests, fix behaviour
  * Implement separate simple class name matching
  * Minor changes
  * Modularize Lua scripts
  * Add Lua scripts for removing annotations
  * Update build status badge in README.md
  * Migrate CI from TravisCI to GitHub Actions
  * Fix running tests without coverage
  * Update ivy-local-classpath
  * Release version 6.0.0
  * Fix extra XML handling of pom_change_dep
  * Add reproducer for #82
  * Respect %jpb_env RPM macro
  * Add bootstrap metadata to XMvn resolver config
  * Delete run_tests.py
  * Replace nose by pytest
  * [install] Make glob pattern work with Python 3.10
  * Adding ppc64le architecture support on travis-ci
  * Drop deprecated add_maven_depmap macro
  * Drop SCL support
  * Fix provides matching
  * Fix builddep snippet generation
  * [test] Add test for builddep snippet generation
  * Add location of java binary used by the java-1.8.0-openjdk
    (JRE) package so that setting JAVA_HOME will work correctly
  * Use XMvn Javadoc MOJO by default
  * Remove explicit import of Python 3 features
  * Remove dependency on Six compatibility library
  * Fix invalid &lt;skippedPlugins&gt; in XMvn configuration
  * [test] Don't try to kill PID 1 during tests
  * [travis] Drop Python 2 from test matrix
  * Add separate subpackage with RPM generators
  * mvn_build: replace inline shell scriptlet with native python
    code
  * [test] Don't use networking during tests
  * Add apache-rat-plugin to skippedPlugins
  * Skip execution of various Maven plugins
  * Remove Python 3.5 from .travis.yml
  * Make generated javadoc package noarch
- Added patch:
  * javapackages-6.1.0-maven-depmap.patch
    + Bulk patch correspoding to our pull request
    https://github.com/fedora-java/javapackages/pull/92 which
    brings back some of the removed tools that we depend on
    heavily
- Modified patches:
  * python-optional.patch
  * suse-use-libdir.patch
    + Rediff to changed context
- Removed patches:
  * 0001-Let-maven_depmap.py-generate-metadata-with-dependenc.patch
  * 0002-Do-not-try-to-construct-POM-from-maven-coordinate-st.patch
  * 0003-Fix-tests-after-the-recent-maven_depmap.py-changes.patch
    + Already part of the above-mentioned bulk patch
  * 0004-Remove-dependency-on-Six-compatibility-library.patch
    + Upstream patch already integrated in the 6.x code-line</changelog>
</package>
<package pkgid="62d95253ec4d393b4da6ae4ef6e9da755014d4df85e76bfafc71a86240b62831" name="python3-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150000.3.3.4"/>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="7b287f06cc3c28ec0841748797181e55a950d972040be2cb8b9ab9c713d89db5" name="python3-libnvme" arch="aarch64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="e1a06a48dd96a7947bc047b07f24e23aa0ba30d5882233a3858fde6759e48896" name="python3-libnvme" arch="ppc64le">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="56c46112baa753af590e059e0ca57638617294af9d0af04fb0ec797272eb7d95" name="python3-libnvme" arch="s390x">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="858da39c9f11b39908af3979e7d90769155d822898039d23ed2cebf0ce9635ed" name="python3-libnvme" arch="x86_64">
  <version epoch="0" ver="1.4+18.g932f9c37e05a" rel="150500.4.3.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1667390400">- Update to version 1.2 (jsc#PED-553):
  * 64-bit Reference Tags and TP-4068 changes
  * Add more details for return code of MI admin cmds
  * Fix poll.h includes
  * Parse dhchap_host_key on controller level
  * Regenerate all documentation
  * Update json config schema for missing dhchap host key
  * build: Add support to build against LibreSSL
  * build: Drop -nostdinc for LibreSSL header checks
  * fabrics: Add new TP8010 definitions
  * fabrics: Add nvmf_get_discovery_wargs()
  * fabrics: Duplicate strings when merging configs
  * fabrics: Filter out empty strings in add_argument()
  * fabrics: Fix build_options() return values
  * fabrics: Use fallthrough statement
  * fabrics: sanitize dump-config output
  * ioctl: Honor rae in nvme_get_nsid_log
  * ioctl: Set log page offset for nvme_get_log_telemetry_host
  * json-schema: add dhchap_key details to host section
  * json: Enforce correctly formatted JSON config files
  * json: Verify JSON config file starts with an array
  * json: fixup dhchap_ctrl_key definitions
  * libnvme-mi: Introduce NVMe Managament Interface library
  * mi-mctp: Add timeout support to MCTP transport
  * mi: Add Get Log Page helpers
  * mi: Add Identify function for secondary controller list
  * mi: Add Identify helper for ns-descs and primary-ctrl-caps
  * mi: Add endpoint get/set timeout API
  * mi: Add firmware download and commit commands
  * mi: Add identify helper for nsid-capable Controller List
  * mi: Add identify helpers for namespace lists
  * mi: Add identify helpers for namespaces
  * mi: Add maximum More Processing Required limit API
  * mi: Allow Admin-message sized More Processing Required responses
  * mi: Distinguish MI status from NVMe (CDW3) status
  * mi: Fix C++ compiler errors
  * mi: Implement Format NVM command
  * mi: Implement Get &amp; Set Features Admin commands
  * mi: Implement NS attach command and helpers
  * mi: Implement Namespace Management command and create/delete helpers
  * mi: Implement Sanitize command
  * mi: Init ctrl_id within xfer
  * mi: Introduce a helper for response status, unify values with ioctls
  * mi: Set log page offset for nvme_get_log_telemetry_host
  * mi: add nvme_mi_status_to_string()
  * mi: fix a memory leak in nvme_mi_open_mctp()
  * mi: fix get_log_page chunked offset check
  * mi: unify MI Get Log Page function with ioctl API
  * nvme-tree: avoid segfault if auth keys are unavailable
  * python: Use nvmf_get_discovery_wargs()
  * python: add missing ctrl attrs to Python bindings
  * rpmbuild: Enable 'make rpm' to build rpm pkgs #408
  * tree: rename controller 'dhchap_key' to 'dhchap_ctrl_key'
  * types: Move enum nvme_data_tfr to types
  * update/cleanup of documentation
  * util: Add LINE_MAX define
  * util: Add get feature length 2 API to support direction parameter
  * util: Add simple UUID type
  * util: Do not expose fallthrough defines
  * various build fixes
  * various fixes reported by coverity
- Drop upstream patches
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
- Make man page build conditiional. Install man page location has been
  fixed upstream.
- Mark the Python directory own by the libnvme3-python package
- Use fixed manpage build date (boo#1047218)
- Fix installation of manual pages to make them accessible</changelog>
  <changelog author="mwilck@suse.com" date="1674216000">- Update to version 1.2+1.g41e1016:
  * Add support for booting from NVMe-oF/TCP according to NVM Express
  Boot Specification v1.0 (jsc#PED-1449)
  * Add support for "nvme show-nbft" and "nvme connect-nbft" subcommands</changelog>
  <changelog author="mwilck@suse.com" date="1674561600">- Use symbol version LIBNVME_1_2_1 for nbft support options
  * 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
  * added %test section in spec file to run unit tests</changelog>
  <changelog author="mwilck@suse.com" date="1675080000">- temporarily disable unit tests on s390x (bsc#1207687, bsc#1207686)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1685016000">- Update to version v1.4 (jsc#PED-553 jsc#PED-3884)
  - Fix invalid string lenght calculcation for UUID (bsc#1209906)
  * fabrics: Fix bad UUID size introduced in recent UUID changes
  - Fix segmentation fault during garbage collection (bsc#1209905)
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
  - Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
  - Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
  - Enabled unit test on s390x again (bsc#1207687, bsc#1207686)
  * test: mi: Explicitly zero args for test API invocations
- Replaced old nbft implementation with the upstream one
- Applied nbft symbol patch directly
  * remove 0001-libnvme-use-LIBNVME_1_2_1-version-for-nbft-commands.patch
- Don't enable TLS if kernel does not support it (git-fixes)
  * fabrics: Do not pass unsupported options to kernel
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="b3d2e06c323bda5806b9d6f26501f3a1c12f852cf7b08dd37ca416bfeda00746" name="python3-looseversion" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150100.3.3.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="b56da6ede4fc06869ae12c466dee41a85fa6a6fb0b8fd5629d803cc2a2c80a0a" name="python3-net-snmp" arch="aarch64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="4108679eacbcf241c9e5d279d2fbc4eeec1694d90ed82b3b503e3aff062323bf" name="python3-net-snmp" arch="ppc64le">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="6503c54c9345856868ab1e9ab33fa56ca8071fa7b86cae2e6d69512f5b6cc4f3" name="python3-net-snmp" arch="s390x">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="d69f00e80eadac5bb2f28248810ff9f1b42fdd74e5acbad4d6082123c55413e1" name="python3-net-snmp" arch="x86_64">
  <version epoch="0" ver="5.9.3" rel="150300.15.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1463832000">- Fix build with perl 5.24.0:
  + Add net-snmp-5.7.3-Fix-Makefile.PL.patch: Fix build system
    recursiely loading Makefile.Pl and destroying its internas.
    See https://rt.perl.org/Public/Bug/Display.html?id=125907
  + net-snmp-5.7.3-Remove-U64-typedef.patch: The U64 typedef
    conflicts with a typedef in a Perl header file. Hence remove
    the U64 typedef from the Net-SNMP header files. Backported from
    upstream commit 477b4307ef1.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Fix build with OpenSSL 1.1 (bsc#1042664):
  + Add net-snmp-5.7.3-build-with-openssl-1.1.patch, cumulated
    squash-patch from the following upstream commits:
    bbed6b86e70b5a3c54f14992696f2308a8d79511
    14bb72fd12bf5b68662893f7d8afbc4a8d52a6c8
    9641b472ef01208f92631016e91b0a4a518163f0
    e4c6937483d4a680570cec05388d2e4b291868a6
    b906c60c8a436d7360267a6d242526b33a9aaac8</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
</package>
<package pkgid="d430986e0af1f26df6b0003d01640d8cf3e46dea41ac28fdb5da2a7e0fe5a38c" name="python3-ovs" arch="aarch64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="8f0e2ad7ade6ee5a5752645eaf182792777c132ed901c810b84060df4952de81" name="python3-ovs" arch="ppc64le">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="ae8c375324ffcfe84b4b94484ea8f8018d8318c512abefbadabfd47aad298f6b" name="python3-ovs" arch="s390x">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="f388351caac9541fc0f841ff87f26120d10d8d8fe1f8f449b7151a0392bc483f" name="python3-ovs" arch="x86_64">
  <version epoch="0" ver="2.14.2" rel="150400.24.9.1"/>
  <changelog author="jcaamano@suse.com" date="1556539200">- Fix problem preventing new installs to run as non root (bsc#1132029),
  including:
  * Align with upstream so that no running configuration is changed on
    upgrades, specifically to avoid changes on the user Open vSwitch runs
    under.
  * hugetblfs groups is created as system group.
- Add missing opnvswitch-ipsec package and systemd service.
- Add patch to use strongswan instead of libreswan for openvswitch-ipsec.
  libreswan package not available currently.
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch
- Add missing ovs-delete-transient-ports systemd service.
- Align installed headers with upstream.
- Fix problem preventing rpm build '--with check'.
- Fix python environment that had directories pointing to /usr/local.
- Version bump to 2.11.1. Some of the changes are:
  * netdev-tc-offloads: Fix probe tc block support
  * rhel: Include all header files in the Fedora's devel package
  * reconnect.c: Don't transition back to ACTIVE when forced to RECONNECT.
  * OVN: Make periodic RAs consistent with RA responder.
  * OVN: Always send prefix option in RAs
  * OVN: Use offset instead of pointer into ofpbuf
  * ofproto: fix the bug of bucket counter is not updated
  * netdev-dpdk: Print netdev name for txq mapping.
  * dpif-netdev-perf: Fix millisecond stats precision with slower TSC.
  * ifupdown.sh: Add missing "--may-exist" option
  * dpif-netdev-perf: Fix double update of perf histograms.
  * dpdk: Stop dumping memzones to stdout.
  * dpctl: Drop parser debug information.
  * netdev-tc-offloads: Properly get the block id on flow del/get
  * netdev-tc-offloads: Improve log message for icmpv6 offload not supported
  * conntrack: Replace structure copy by memcpy().
  * conntrack: Lookup only 'UNNAT conns' in 'nat_clean()'.
  * conntrack: Fix race for NAT cleanup.
  * ovn-nbctl: Don't segfault when ovn-northd doesn't configure dynamic addresses.
  * datapath-windows: Add annotations to find vport functions
  * datapath-windows: Guard vport usage in user.c
  * datapath-windows: Fix potential deadlock in event subscription
  * datapath-windows: Fix race condition during port creation
  * datapath-windows: Fix nbl cleanup when memory allocation fails
  * netdev-linux: Remove ingress qdisc before trying to add shared block
  * netdev-tc-offloads: Remove ingress qdisc on tc init flow api
  * ovsdb-idl: Fix memory leak of idl-&gt;remote.
  * travis: Remove 'sudo' configuration.
  * OVN: Add port addresses to IPAM after all ports are joined.
  * dpif-netlink: Free leaked ofpbuf by using ofpbuf_delete
  * OVN: update RA next_announce according to {min, max}_interval
  * rconn: Avoid occasional immediate connection failures.
  * dpdk: Fix case-sensitivity of dpdk-init knob.
  * NEWS: Clean up the 2.11.0 release notes a bit.
  * conntrack: Fix L4 csum for V6 extension hdr pkts.
  * packets: Change return type for 'packet_csum_upperlayer6()'.
  * ovsdb-client: Fix typo.
  * ovn-nbctl: Daemon mode should retry when IDL connection lost.
  * ofctl: break the loop if ovs_pcap_read returns error
  * netlink: added check to prevent netlink attribute overflow</changelog>
  <changelog author="jcaamano@suse.com" date="1557144000">- Use temporary directory for python build.</changelog>
  <changelog author="jcaamano@suse.com" date="1560168000">- Add upstream patches to fix bsc#1135884:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1561032000">- Update DPDK dependency to support DPDK 18.11.2.</changelog>
  <changelog author="jcaamano@suse.com" date="1563278400">- Add unbound as a build requirement to support asynchronous DNS
  resolving for remotes.</changelog>
  <changelog author="jcaamano@suse.com" date="1565265600">- Fixed missing obsoletes for old python-ovs (bsc#1138948).</changelog>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684238400">- added patch to include fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337(bsc#1206581) when parsing malformed LLDP packets
  * CVE-2022-4338.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684497600">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="57a2dc70aff905173ab34baad4606a49aee926921fc3bbff6bc5a98137fc5d4a" name="python3-ovs3" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="bfcc5606747435564c729e3f66b05a4fbc886597e0612d4d028ad8725d36e52b" name="python3-ovs3" arch="ppc64le">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="4ff3df8e0eb5726b2ce62e67f012ece38e3aaa91cbf32d5b48ee3e6d04cfe0e7" name="python3-ovs3" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="8ab86884144eb3ffb64bcfef5aad732960c19f447c98f6487129535db6c1ff18" name="python3-ovs3" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150500.3.3.1"/>
  <changelog author="jcaamano@suse.com" date="1572264000">- Update openvswitch to 2.12.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/master/NEWS
- Removed patches that are already included upstream:
  * 0001-rhel-secure-openvswitch-useropts.patch
  * 0002-rhel-let-ctl-handle-runtime-directory.patch
- Rebased patches:
  * 0001-Use-strongswan-for-openvswitch-ipsec-service.patch</changelog>
  <changelog author="dmueller@suse.com" date="1581595200">- add missing sortedcontainers dependency to the python bindings</changelog>
  <changelog author="jcaamano@suse.com" date="1588593600">- Update openvswitch to 2.13.0.
  * For a list of changes, check
    https://github.com/openvswitch/ovs/blob/v2.13.0/NEWS
  * This version drops python2 binding support. Only python3 bindings
    provided going forward.
  * Tool ovs-vlan-bug-workaround is no longer provided.
- OVN was split to its own repo but is still built together with OVS and as
  such from this same source package. OVN initial version is 20.03.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v20.03.0/NEWS
  * Packages openvswitch-ovn* are renamed to ovn*.
  * OVN now has its own sysconfig and log paths.
- Add OVS patch to be proposed upstream:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
- Patch instead of post-processing configuration files to set running
  credentials (bsc#1157338):
  * 0001-Run-openvswitch-as-openvswitch-openvswitch.patch
  * 0001-Run-ovn-as-openvswitch-openvswitch.patch
- Will no longer change group ownership of /dev/hugepages to 'hugetlbfs'
  (bsc#1140835). System admin should mount hugepages on a path and permissions of
  his choosing for OVS. Add patch:
  * 0001-Don-t-change-permissions-of-dev-hugepages.patch
- Will no longer install udev rule to change group ownership of vfio devices to
  'hugetlbfs'. Group name does not make much sense in this case and ownership of
  vfio devices should be coordinated system wide or per device.
- Will no longer run under group 'hugetlbfs' on new installs with DPDK enabled.
  OVS will now run under group 'openvswitch' whether compiled with DPDK support
  or not.
- OVS persistent state is now saved on /var/lib/openvswitch instead of
  /etc/openvswitch for new installs.</changelog>
  <changelog author="jcaamano@suse.com" date="1591185600">- add missing provides/obsoletes for python3-openvswitch-test</changelog>
  <changelog author="jcaamano@suse.com" date="1592222400">- Fix preserving old default OVS_USER_ID for users that removed the
  override at /etc/sysconfig/openvswitch or for users affected by
  fillup bug below (bsc#1172861).
- Add patch to workaround a possible fillup issue that could cause
  existing openvswitch configuration to be unintendedly altered during
  upgrades (bsc#1172929).
  * 0001-Use-double-hash-for-OVS_USER_ID-comment.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1598961600">- Update openvswitch to 2.14.0. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.0/NEWS
- Update OVN to 20.06.2. For a list of changes, check
  https://github.com/ovn-org/ovn/blob/v20.06.2/NEWS</changelog>
  <changelog author="jcaamano@suse.com" date="1601380800">- Fix wrong default directories for OVS python utilities (bsc#1176273).
- Add upstream patches to fix openvswitch-ipsec service (bsc#1176273).
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1604404800">- Replaced `%service_del_postun -n` with `%service_del_postun_without_restart`
  (bsc#1117483).</changelog>
  <changelog author="jcaamano@suse.com" date="1613131200">- Update openvswitch to 2.14.2. For a list of changes, check
  https://github.com/openvswitch/ovs/blob/v2.14.2/NEWS
  Includes security fix for CVE-2020-27827 (bsc#1181345) and CVE-2020-35498
  (bsc#1181742).
- Removed patches no longer applying to code base:
  * 0001-rhel-Fix-reload-of-OVS_USER_ID-on-startup.patch
  * 0001-ipsec-Fix-Strongswan-configuration-syntax.patch</changelog>
  <changelog author="jcaamano@suse.com" date="1619697600">- Replace deprecated /var/run with /run (bsc#1185176, bsc#1185177).
  * 0001-Replace-deprecated-var-run-with-run.patch</changelog>
  <changelog author="dmueller@suse.com" date="1620648000">- add openssl(cli) dependency on pki (bsc#1185839)</changelog>
  <changelog author="pgajdos@suse.com" date="1661342400">- security update
- added patches
  fix CVE-2021-36980 [bsc#1188524], use-after-free in decode_NXAST_RAW_ENCAP
  + openvswitch-CVE-2021-36980.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1677412800">- Update to version v3.1.0.
  Some of the features are,
  - ovs-vswitchd now detects changes in CPU affinity and adjusts the number
    of handler and revalidator threads if necessary.
  - AF_XDP:
  * Added support for building with libxdp and libbpf &gt;= 0.7.
  * Support for AF_XDP is now enabled by default if all dependencies are
    available at the build time.  Use --disable-afxdp to disable.
    Use --enable-afxdp to fail the build if dependencies are not present.
  - ovs-appctl:
  * "ovs-appctl ofproto/trace" command can now display port names with the
    "--names" option.
  - OVSDB-IDL:
  * Add the support to specify the persistent uuid for row insert in both
    C and Python IDLs.
  - Windows:
  * Conntrack IPv6 fragment support.
  - DPDK:
  * Add support for DPDK 22.11.1.
  - For the QoS max-rate and STP/RSTP path-cost configuration OVS now assumes
    10 Gbps link speed by default in case the actual link speed cannot be
    determined.  Previously it was 10 Mbps.  Values can still be overridden
    by specifying 'max-rate' or '[r]stp-path-cost' accordingly.
  - OpenFlow:
  * New OpenFlow extension NXT_CT_FLUSH to flush connections matching
    the specified fields.
  - ovs-ctl:
  * New option '--dump-hugepages' to include hugepages in core dumps. This
    can assist with postmortem analysis involving DPDK, but may also produce
    significantly larger core dump files.
  - ovs-dpctl and 'ovs-appctl dpctl/' commands:
  * 'flush-conntrack' is now capable of handling partial 5-tuple,
    with additional optional parameter to specify the reply direction.
  - ovs-ofctl:
  * New command 'flush-conntrack' that accepts zone and 5-tuple (or partial
    5-tuple) for both directions.
  - Support for travis-ci.org based continuous integration builds has been
    dropped.
  - Userspace datapath:
  * Add '-secs' argument to appctl 'dpif-netdev/pmd-rxq-show' to show
    the pmd usage of an Rx queue over a configurable time period.
  * Add new experimental PMD load based sleeping feature. PMD threads can
    request to sleep up to a user configured 'pmd-maxsleep' value under
    low load conditions.
  - For more details, check
    https://github.com/openvswitch/ovs/blob/v3.1.0/NEWS
  - Includes secrity fix for CVE-2022-4338 (bsc#1206580) and CVE-2022-4337 (bsc#1206581)
- OVN package is not included as new version with API chnages are not yet released.
- Removed upstreamed patches,
  * 0001-Replace-deprecated-var-run-with-run.patch
  * openvswitch-CVE-2021-36980.patch
- Added ovsb tool install patch,
  * install-ovsdb-tools.patch
- Removed patch "0001-Run-ovn-as-openvswitch-openvswitch.patch" as compatible OVN is not yet released.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678276800">- Updated package name:openvswitch3 for version v3.1.0 as legacy openvswitch version(v2.14.2) also needs to be supported.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678449600">- Remove reduntant obsoletes and add proper obsoletes version
- Do not obsolete old package and let user decide.
- Add conflict for openvswitch-doc</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1678881600">- Rename package python3-ovs to shift the old openvswitch version 2.14.2 to legacy module</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679572800">- Added OVN version 23.03.0 as it is built together with OVS and as
  such from this same source package.
  * For a list of changes, check
    https://github.com/ovn-org/ovn/blob/v23.03.0/NEWS
  * Added Patch 0001-Run-ovn-as-openvswitch-openvswitch.patch</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679659200">- Added versioning changes for OVN and LDFLAGS to fix compilation error</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1679832000">- Fixed the install check error by adding provides for python3-openvswitch
- Added provides for OVN as it may be required for any dependent packages.</changelog>
  <changelog author="Duraisankar.pitchumani@suse.com" date="1684324800">- Fix CVE-2023-1668 [bsc#1210054], openvswitch: remote traffic denial of service via crafted packets with IP proto 0
- Added patch,
    CVE-2023-1668.patch</changelog>
</package>
<package pkgid="79e6e9e37601367b2c03b2d77d7912a91b47978ff54873bf10ce851bf7e5497a" name="python3-ply" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.3.4"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="07cda46ef2a6805aab5a7fe3fa3f6440f1e6a248615107f54202ab5d3e282eda" name="python3-protobuf" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="9eabb2aef5837091fdbea4009555d0c6f07eb9ef956dbc9ff48fc7210c1e39cf" name="python3-protobuf" arch="ppc64le">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="18ef983574ff12657deaa916a38d81a1621012067da497eb2fb457122cf2380e" name="python3-protobuf" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="148e47047ce8d14e5b84af0197308736ce6440ca4eaaf867e89efeae8c05d0fc" name="python3-protobuf" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="1d239f91c8ffd7fbdad24a58db41567111bf8ba34588b29d164d8549d3deed33" name="python3-pyzmq" arch="aarch64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="f881436636c070a3467c2261c04a5a164b05bb09a170ec7317777062cc274f4b" name="python3-pyzmq" arch="ppc64le">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="cd24ce77e880a71170518d168203d1d629f43d4fa0e17fab71f6fd6195511dc6" name="python3-pyzmq" arch="s390x">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="e2d9d07654cffc31e5199f40aa1ba9fee1e114c4ca5abd78f7fdc78b2e6cc21a" name="python3-pyzmq" arch="x86_64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="dee4e7e56f8fd6e1072bdfd1e985c8062472c467f09bc4527b775383c60d99e9" name="python3-pyzmq-devel" arch="aarch64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="24764d5a44e1310dd45e0e3bd5a6172173850773dec86ba1bce9d39b9b2ed743" name="python3-pyzmq-devel" arch="ppc64le">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="43e8fb80cd43dd2a777e74c2104d935b158ce54995a4d6baee1f15d41bbad96e" name="python3-pyzmq-devel" arch="s390x">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="d998cd58a4a48cc09f4e540c95eb5f44a7e5a0dcbbd89b1d0aac72617da34c75" name="python3-pyzmq-devel" arch="x86_64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="9f2cb8b054dcb8fd435d2ad8402a9245dd7413f5ccd94725155b900183ca5cc7" name="python3-reportlab" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150000.3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1433505600">- Update to 3.0
  * ReportLab 3.0 now supports Python 2.7, 3.3 and higher.
  * There has been a substantial internal rewrite to ensure
    consistent use of unicode strings for natural-language text,
    and of bytes for all file format internals.
  * Python 3.x compatibility
  * New features
  - Add ability to output greyscale and 1-bit PIL images without
    conversion to RGB. (contributed by Matthew Duggan)
  - highlight annotation (contributed by Ben Echols)
  * Other
  - numerous very minor fixes, visible through BitBucket.</changelog>
  <changelog author="kkaempf@suse.com" date="1433505601">- Update to 3.1
  * support for emoji
  * improved pip-based installers</changelog>
  <changelog author="kkaempf@suse.com" date="1433505602">- Update to 3.2.0
  * Added proportional underlining specific to font sizes, set via
    the `underlineProportion` attribute of ParagraphStyles.
  * TrueType fonts: added support for cmaps 10 &amp; 13
  * DocTemplate class now supports a boolean `displayDocTitle` argument.
  * TableofContents now supports a formatter argument to allow
    formatting of the displayed page numbers (eg for appendices etc).
  * Table `repeatRows` can now be a tuple of row numbers to allow
    incomplete ranges of rows to be repeated.
  * Tables now do pass instance.`spaceBefore` &amp; `spaceAfter` to
    their split children when split
  * Several strangenesses were fixed in the pdfbase.pdfform module;
    Multiple usage is now allowed.
  * Error message fixes
  * Various environment fixes for Google Application Environment
  * Resource fixes
  * PDFDoc can now set the `Lang` attribute
  * canvas.drawString and similar now allow the character spacing
    to be set
  * Index of accented stuff has been improved
  * RTL code was improved
  * fix Propertyset.clone
  * `flowables.py`: fix ImageAndFlowables so it avoids testing
    negative availableWidth</changelog>
  <changelog author="freitag@opensuse.org" date="1446897600">- Fixed source download link.</changelog>
  <changelog author="dmueller@suse.com" date="1459252800">- install LICENSE.txt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Update to 3.4.0
  * We now support SVG as a format for embedded vector graphics.
  * The &lt;barCodeFlowable&gt; and &lt;barCode&gt; tags now support additional
    encodings.
  * We have considerably expanded our support for fillable forms
    within PDF files. The &lt;textField&gt; tag has many more attributes
    &lt;checkboxField&gt;, &lt;radioField&gt;, &lt;choiceField&gt; &amp; &lt;listboxField&gt;
    which along with the new &lt;textField&gt; make possible PDF forms.
  * The &lt;ul&gt; &amp; &lt;ol&gt; tags now support automatic style change for the
    start/type parameter, by using a space separated list fo start
    values
- Implement single-spec version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="jmatejek@suse.com" date="1500984000">- drop-requirements.patch: do not list setuptools and pip in egg-info
  as requirements
  (fixes bsc#1049516, upstream issue https://bitbucket.org/rptlab/reportlab/issues/113 )
- set LANG variable correctly to help with test suite
  * note that test suite is broken, multiple tests fail and this does not stop build
  * causes of failure are spurious though</changelog>
  <changelog author="mcepl@suse.com" date="1579694400">- Add make_toColor_safe.patch fixing bsc#1154370 (CVE-2019-17626)
  restrict reportlab.lib.color.toColor to protect against unsafe
  input.
- Rebase other patches: drop-requirements.patch and
  reportlab-missing-includes.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628078400">- Add CVE-2020-28463_fix_ssrf.patch fixing bsc#1182503
  (CVE-2020-28463) fix SSRF in img tags.
- Refresh make_toColor_safe.patch</changelog>
  <changelog author="mcepl@suse.com" date="1686312000">- Add CVE-2023-33733-code-injection.patch (CVE-2023-33733,
  bsc#1212065) avoiding arbitrary code execution via supplying a
  crafted PDF file (patches from
  https://hg.reportlab.com/hg-public/reportlab/raw-rev/324a3d0392d5
  and https://hg.reportlab.com/hg-public/reportlab/raw-rev/5b56ae4f05ee)</changelog>
</package>
<package pkgid="a4bacf842b3763b859af5a17c1784be6c5993b578771943f6cdde41a1d52cb0f" name="python3-reportlab" arch="ppc64le">
  <version epoch="0" ver="3.4.0" rel="150000.3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1433505600">- Update to 3.0
  * ReportLab 3.0 now supports Python 2.7, 3.3 and higher.
  * There has been a substantial internal rewrite to ensure
    consistent use of unicode strings for natural-language text,
    and of bytes for all file format internals.
  * Python 3.x compatibility
  * New features
  - Add ability to output greyscale and 1-bit PIL images without
    conversion to RGB. (contributed by Matthew Duggan)
  - highlight annotation (contributed by Ben Echols)
  * Other
  - numerous very minor fixes, visible through BitBucket.</changelog>
  <changelog author="kkaempf@suse.com" date="1433505601">- Update to 3.1
  * support for emoji
  * improved pip-based installers</changelog>
  <changelog author="kkaempf@suse.com" date="1433505602">- Update to 3.2.0
  * Added proportional underlining specific to font sizes, set via
    the `underlineProportion` attribute of ParagraphStyles.
  * TrueType fonts: added support for cmaps 10 &amp; 13
  * DocTemplate class now supports a boolean `displayDocTitle` argument.
  * TableofContents now supports a formatter argument to allow
    formatting of the displayed page numbers (eg for appendices etc).
  * Table `repeatRows` can now be a tuple of row numbers to allow
    incomplete ranges of rows to be repeated.
  * Tables now do pass instance.`spaceBefore` &amp; `spaceAfter` to
    their split children when split
  * Several strangenesses were fixed in the pdfbase.pdfform module;
    Multiple usage is now allowed.
  * Error message fixes
  * Various environment fixes for Google Application Environment
  * Resource fixes
  * PDFDoc can now set the `Lang` attribute
  * canvas.drawString and similar now allow the character spacing
    to be set
  * Index of accented stuff has been improved
  * RTL code was improved
  * fix Propertyset.clone
  * `flowables.py`: fix ImageAndFlowables so it avoids testing
    negative availableWidth</changelog>
  <changelog author="freitag@opensuse.org" date="1446897600">- Fixed source download link.</changelog>
  <changelog author="dmueller@suse.com" date="1459252800">- install LICENSE.txt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Update to 3.4.0
  * We now support SVG as a format for embedded vector graphics.
  * The &lt;barCodeFlowable&gt; and &lt;barCode&gt; tags now support additional
    encodings.
  * We have considerably expanded our support for fillable forms
    within PDF files. The &lt;textField&gt; tag has many more attributes
    &lt;checkboxField&gt;, &lt;radioField&gt;, &lt;choiceField&gt; &amp; &lt;listboxField&gt;
    which along with the new &lt;textField&gt; make possible PDF forms.
  * The &lt;ul&gt; &amp; &lt;ol&gt; tags now support automatic style change for the
    start/type parameter, by using a space separated list fo start
    values
- Implement single-spec version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="jmatejek@suse.com" date="1500984000">- drop-requirements.patch: do not list setuptools and pip in egg-info
  as requirements
  (fixes bsc#1049516, upstream issue https://bitbucket.org/rptlab/reportlab/issues/113 )
- set LANG variable correctly to help with test suite
  * note that test suite is broken, multiple tests fail and this does not stop build
  * causes of failure are spurious though</changelog>
  <changelog author="mcepl@suse.com" date="1579694400">- Add make_toColor_safe.patch fixing bsc#1154370 (CVE-2019-17626)
  restrict reportlab.lib.color.toColor to protect against unsafe
  input.
- Rebase other patches: drop-requirements.patch and
  reportlab-missing-includes.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628078400">- Add CVE-2020-28463_fix_ssrf.patch fixing bsc#1182503
  (CVE-2020-28463) fix SSRF in img tags.
- Refresh make_toColor_safe.patch</changelog>
  <changelog author="mcepl@suse.com" date="1686312000">- Add CVE-2023-33733-code-injection.patch (CVE-2023-33733,
  bsc#1212065) avoiding arbitrary code execution via supplying a
  crafted PDF file (patches from
  https://hg.reportlab.com/hg-public/reportlab/raw-rev/324a3d0392d5
  and https://hg.reportlab.com/hg-public/reportlab/raw-rev/5b56ae4f05ee)</changelog>
</package>
<package pkgid="7e6b4fd6882c3459edde9797222a099507faf8072b22d10fdc7f5b3b245175fb" name="python3-reportlab" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150000.3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1433505600">- Update to 3.0
  * ReportLab 3.0 now supports Python 2.7, 3.3 and higher.
  * There has been a substantial internal rewrite to ensure
    consistent use of unicode strings for natural-language text,
    and of bytes for all file format internals.
  * Python 3.x compatibility
  * New features
  - Add ability to output greyscale and 1-bit PIL images without
    conversion to RGB. (contributed by Matthew Duggan)
  - highlight annotation (contributed by Ben Echols)
  * Other
  - numerous very minor fixes, visible through BitBucket.</changelog>
  <changelog author="kkaempf@suse.com" date="1433505601">- Update to 3.1
  * support for emoji
  * improved pip-based installers</changelog>
  <changelog author="kkaempf@suse.com" date="1433505602">- Update to 3.2.0
  * Added proportional underlining specific to font sizes, set via
    the `underlineProportion` attribute of ParagraphStyles.
  * TrueType fonts: added support for cmaps 10 &amp; 13
  * DocTemplate class now supports a boolean `displayDocTitle` argument.
  * TableofContents now supports a formatter argument to allow
    formatting of the displayed page numbers (eg for appendices etc).
  * Table `repeatRows` can now be a tuple of row numbers to allow
    incomplete ranges of rows to be repeated.
  * Tables now do pass instance.`spaceBefore` &amp; `spaceAfter` to
    their split children when split
  * Several strangenesses were fixed in the pdfbase.pdfform module;
    Multiple usage is now allowed.
  * Error message fixes
  * Various environment fixes for Google Application Environment
  * Resource fixes
  * PDFDoc can now set the `Lang` attribute
  * canvas.drawString and similar now allow the character spacing
    to be set
  * Index of accented stuff has been improved
  * RTL code was improved
  * fix Propertyset.clone
  * `flowables.py`: fix ImageAndFlowables so it avoids testing
    negative availableWidth</changelog>
  <changelog author="freitag@opensuse.org" date="1446897600">- Fixed source download link.</changelog>
  <changelog author="dmueller@suse.com" date="1459252800">- install LICENSE.txt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Update to 3.4.0
  * We now support SVG as a format for embedded vector graphics.
  * The &lt;barCodeFlowable&gt; and &lt;barCode&gt; tags now support additional
    encodings.
  * We have considerably expanded our support for fillable forms
    within PDF files. The &lt;textField&gt; tag has many more attributes
    &lt;checkboxField&gt;, &lt;radioField&gt;, &lt;choiceField&gt; &amp; &lt;listboxField&gt;
    which along with the new &lt;textField&gt; make possible PDF forms.
  * The &lt;ul&gt; &amp; &lt;ol&gt; tags now support automatic style change for the
    start/type parameter, by using a space separated list fo start
    values
- Implement single-spec version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="jmatejek@suse.com" date="1500984000">- drop-requirements.patch: do not list setuptools and pip in egg-info
  as requirements
  (fixes bsc#1049516, upstream issue https://bitbucket.org/rptlab/reportlab/issues/113 )
- set LANG variable correctly to help with test suite
  * note that test suite is broken, multiple tests fail and this does not stop build
  * causes of failure are spurious though</changelog>
  <changelog author="mcepl@suse.com" date="1579694400">- Add make_toColor_safe.patch fixing bsc#1154370 (CVE-2019-17626)
  restrict reportlab.lib.color.toColor to protect against unsafe
  input.
- Rebase other patches: drop-requirements.patch and
  reportlab-missing-includes.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628078400">- Add CVE-2020-28463_fix_ssrf.patch fixing bsc#1182503
  (CVE-2020-28463) fix SSRF in img tags.
- Refresh make_toColor_safe.patch</changelog>
  <changelog author="mcepl@suse.com" date="1686312000">- Add CVE-2023-33733-code-injection.patch (CVE-2023-33733,
  bsc#1212065) avoiding arbitrary code execution via supplying a
  crafted PDF file (patches from
  https://hg.reportlab.com/hg-public/reportlab/raw-rev/324a3d0392d5
  and https://hg.reportlab.com/hg-public/reportlab/raw-rev/5b56ae4f05ee)</changelog>
</package>
<package pkgid="9d75dcc7162396833b16ad7a2ea69f7c75e0fd7dec6807871ab1ee22fbac8c27" name="python3-reportlab" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150000.3.9.1"/>
  <changelog author="kkaempf@suse.com" date="1433505600">- Update to 3.0
  * ReportLab 3.0 now supports Python 2.7, 3.3 and higher.
  * There has been a substantial internal rewrite to ensure
    consistent use of unicode strings for natural-language text,
    and of bytes for all file format internals.
  * Python 3.x compatibility
  * New features
  - Add ability to output greyscale and 1-bit PIL images without
    conversion to RGB. (contributed by Matthew Duggan)
  - highlight annotation (contributed by Ben Echols)
  * Other
  - numerous very minor fixes, visible through BitBucket.</changelog>
  <changelog author="kkaempf@suse.com" date="1433505601">- Update to 3.1
  * support for emoji
  * improved pip-based installers</changelog>
  <changelog author="kkaempf@suse.com" date="1433505602">- Update to 3.2.0
  * Added proportional underlining specific to font sizes, set via
    the `underlineProportion` attribute of ParagraphStyles.
  * TrueType fonts: added support for cmaps 10 &amp; 13
  * DocTemplate class now supports a boolean `displayDocTitle` argument.
  * TableofContents now supports a formatter argument to allow
    formatting of the displayed page numbers (eg for appendices etc).
  * Table `repeatRows` can now be a tuple of row numbers to allow
    incomplete ranges of rows to be repeated.
  * Tables now do pass instance.`spaceBefore` &amp; `spaceAfter` to
    their split children when split
  * Several strangenesses were fixed in the pdfbase.pdfform module;
    Multiple usage is now allowed.
  * Error message fixes
  * Various environment fixes for Google Application Environment
  * Resource fixes
  * PDFDoc can now set the `Lang` attribute
  * canvas.drawString and similar now allow the character spacing
    to be set
  * Index of accented stuff has been improved
  * RTL code was improved
  * fix Propertyset.clone
  * `flowables.py`: fix ImageAndFlowables so it avoids testing
    negative availableWidth</changelog>
  <changelog author="freitag@opensuse.org" date="1446897600">- Fixed source download link.</changelog>
  <changelog author="dmueller@suse.com" date="1459252800">- install LICENSE.txt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492603200">- Update to 3.4.0
  * We now support SVG as a format for embedded vector graphics.
  * The &lt;barCodeFlowable&gt; and &lt;barCode&gt; tags now support additional
    encodings.
  * We have considerably expanded our support for fillable forms
    within PDF files. The &lt;textField&gt; tag has many more attributes
    &lt;checkboxField&gt;, &lt;radioField&gt;, &lt;choiceField&gt; &amp; &lt;listboxField&gt;
    which along with the new &lt;textField&gt; make possible PDF forms.
  * The &lt;ul&gt; &amp; &lt;ol&gt; tags now support automatic style change for the
    start/type parameter, by using a space separated list fo start
    values
- Implement single-spec version</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="jmatejek@suse.com" date="1500984000">- drop-requirements.patch: do not list setuptools and pip in egg-info
  as requirements
  (fixes bsc#1049516, upstream issue https://bitbucket.org/rptlab/reportlab/issues/113 )
- set LANG variable correctly to help with test suite
  * note that test suite is broken, multiple tests fail and this does not stop build
  * causes of failure are spurious though</changelog>
  <changelog author="mcepl@suse.com" date="1579694400">- Add make_toColor_safe.patch fixing bsc#1154370 (CVE-2019-17626)
  restrict reportlab.lib.color.toColor to protect against unsafe
  input.
- Rebase other patches: drop-requirements.patch and
  reportlab-missing-includes.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628078400">- Add CVE-2020-28463_fix_ssrf.patch fixing bsc#1182503
  (CVE-2020-28463) fix SSRF in img tags.
- Refresh make_toColor_safe.patch</changelog>
  <changelog author="mcepl@suse.com" date="1686312000">- Add CVE-2023-33733-code-injection.patch (CVE-2023-33733,
  bsc#1212065) avoiding arbitrary code execution via supplying a
  crafted PDF file (patches from
  https://hg.reportlab.com/hg-public/reportlab/raw-rev/324a3d0392d5
  and https://hg.reportlab.com/hg-public/reportlab/raw-rev/5b56ae4f05ee)</changelog>
</package>
<package pkgid="29152b755a3df45decf95919c449be03887346440defeae5b4804654312e0f97" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150500.4.9.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="528a1e8a80b1617a5ada20a1558f2e866324c730acb513e007a7d6000659f65b" name="python3-salt" arch="ppc64le">
  <version epoch="0" ver="3006.0" rel="150500.4.9.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="e84dad3c2fa4ac82e26b107b874f91129d128fc797831e438a46aab6cb17b554" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150500.4.9.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="00eaa50b85a525f19657380b4be024a148da8e49c3fdfc8766f85cf71fea6f34" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150500.4.9.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673956800">- Update to Salt release version 3005.1 (jsc#PED-3042)
- See release notes: https://docs.saltstack.com/en/latest/topics/releases/3005.1.html
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Add missing patch after rebase to fix collections Mapping issues
- Prevent deadlocks in salt-ssh executions
- Create new salt-tests subpackage containing Salt tests
- Added:
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * detect-module.run-syntax.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fixes-for-python-3.10-502.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-aliases-in-the-fqdns-grains.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * adds-explicit-type-cast-for-port.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1679054400">- Require python3-jmespath runtime dependency (bsc#1209233)
- Fix problem with detecting PTF packages (bsc#1208691)
- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683547200">- Update to Salt release version 3006.0 (jsc#PED-3139)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Added:
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
- Modified:
  * 3005.1-implement-zypper-removeptf-573.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * allow-entrypoint-compatibility-for-importlib-metadat.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="64bffebb6b6de6547cba2e4e6e6888d55bba5d8f7641cfd1754a9c6ca2b6d17f" name="python3-simplejson" arch="aarch64">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="0f5cff7bdc9fb6023039670aae66e81bdd76b1b62b3b8a8dda135efbecbf6367" name="python3-simplejson" arch="ppc64le">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="d77cefa037cc0c36880bee663c95b8635ebd878e8e61d417f4bdb6e8255abd0a" name="python3-simplejson" arch="s390x">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="57a20c3ba52c22a2d6eba23c8ab56aa421ff80c9e2adba7ebe35c087dad8b241" name="python3-simplejson" arch="x86_64">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="7e9ea4a52b2dc3f734263d8ea43fa058f18f2c2a6a77f40c859ccb6da072a5b5" name="python3-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="42af7afd74a495b419850561ace906a622fee42b619f6b22dd279fb48c6b03e6" name="python3-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="6363c203d7f49a0bd1bb8bd56f470b1136d6fdaceb26a9de8cbf332298a8b990" name="python3-solv" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="7f45526143a210be1d670c382d634d691128afa0dcf99fa449bf3c23190f1854" name="python3-solv" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="bcc2648aab0c21d39d8599dd9304f7cf61be7464e70e4478bdfac5d07432c170" name="python3-solv" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="74c781c088ee1b56effac06e4002a3a09a758d158bd45a171497512d61e15974" name="python3-solv" arch="ppc64le">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="9e9aa9958d5d3a52656d1e59d883941f6359a9b2cce23feb91f49e3f40c059e9" name="python3-solv" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="ca2af5d65d6e24e5d066952513a18012b1c20fa575293d03dcb64d82b362cfba" name="python3-solv" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="4783d005b6eb7715d1e8c6eec6cdb6d553bd86ba6a219c1793d3980e7a20fea4" name="python3-sqlparse" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="150300.3.6.1"/>
  <changelog author="ledest@gmail.com" date="1415448000">- fix bashism in pre script</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431518400">- update to version 0.1.15:
  * Fix a regression for identifiers with square brackets notation
    (issue153, by darikg).
  * Add missing SQL types (issue154, issue155, issue156, by
    jukebox).
  * Fix parsing of multi-line comments (issue172, by JacekPliszka).
  * Fix parsing of escaped backslashes (issue174, by caseyching).
  * Fix parsing of identifiers starting with underscore (issue175).
  * Fix misinterpretation of IN keyword (issue183).
  * Improve formatting of HAVING statements.
  * Improve parsing of inline comments (issue163).
  * Group comments to parent object (issue128, issue160).
  * Add double precision builtin (issue169, by darikg).
  * Add support for square bracket array indexing (issue170,
    issue176, issue177 by darikg).
  * Improve grouping of aliased elements (issue167, by darikg).
  * Support comments starting with '#' character (issue178).
- additional changes from version 0.1.14:
  * Floats in UPDATE statements are now handled correctly
    (issue145).
  * Properly handle string literals in comparisons (issue148,
    change proposed by aadis).
  * Fix indentation when using tabs (issue146).
  * Improved formatting in list when newlines precede commas
    (issue140).
- additional changes from version 0.1.13:
  * Fix a regression in handling of NULL keywords introduced in
    0.1.12.
- additional changes from version 0.1.12:
  * Fix handling of NULL keywords in aliased identifiers.
  * Fix SerializerUnicode to split unquoted newlines (issue131, by
    Michael Schuller).
  * Fix handling of modulo operators without spaces (by gavinwahl).
  * Improve parsing of identifier lists containing placeholders.
  * Speed up query parsing of unquoted lines (by Michael Schuller).
- additional changes from version 0.1.11:
  * Fix incorrect parsing of string literals containing line breaks
    (issue118).
  * Fix typo in keywords, add MERGE, COLLECT keywords
    (issue122/124, by Cristian Orellana).
  * Improve parsing of string literals in columns.
  * Fix parsing and formatting of statements containing EXCEPT
    keyword.
  * Fix Function.get_parameters() (issue126/127, by spigwitmer).
  * Classify DML keywords (issue116, by Victor Hahn).
  * Add missing FOREACH keyword.
  * Grouping of BEGIN/END blocks.
  * Python 2.5 isn't automatically tested anymore, neither Travis
    nor Tox still support it out of the box.</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.2.1</changelog>
  <changelog author="tbechtold@suse.com" date="1499860800">- update to 0.2.3:
  * New command line option "--encoding" (by twang2218, pr317).
  * Support CONCURRENTLY keyword (issue322, by rowanseymour).
  * Fix some edge-cases when parsing invalid SQL statements.
  * Fix indentation of LIMIT (by romainr, issue320).
  * Fix parsing of INTO keyword (issue324).
  * Several improvements regarding encodings.
  * Add comma_first option: When splitting list "comma first" notation
  is used (issue141).
  * Fix parsing of incomplete AS (issue284, by vmuriart).
  * Fix parsing of Oracle names containing dollars (issue291).
  * Fix parsing of UNION ALL (issue294).
  * Fix grouping of identifiers containing typecasts (issue297).
  * Add Changelog to sdist again (issue302).
  * `is_whitespace` and `is_group` changed into properties
- convert to singlespec</changelog>
  <changelog author="alarrosa@suse.com" date="1535025600">- Update to 0.2.4:
  * Add more keywords for MySQL table options (pr328, pr333, by phdru).
  * Add more PL/pgSQL keywords (pr357, by Demetrio92).
  * Improve parsing of floats (pr330, by atronah).
  * Fix parsing of MySQL table names starting with digits (issue337).
  * Fix detection of identifiers using comparisons (issue327).
  * Fix parsing of UNION ALL after WHERE (issue349).
  * Fix handling of semicolon in assignments (issue359, issue358).
- Use fdupes and %license
- Remove shebangs from non-executable python files</changelog>
  <changelog author="jayvdb@gmail.com" date="1552392000">- Move fdupes from %check to %install
- Update to v0.3.0
  * Remove support for Python 3.3.
  * New formatting option "--indent_after_first"
  * New formatting option "--indent_columns"
  * Add UPSERT keyword
  * Strip multiple whitespace within parentheses
  * Support double slash (//) comments
  * Support for Calcite temporal keywords
  * Fix occasional IndexError
  * Fix incorrect splitting of strings containing new lines
  * Fix reindent issue for parenthesis
  * Fix from( parsing issue
  * Fix for get_real_name() to return correct name
  * Wrap function params when wrap_after is set
  * Fix parsing of "WHEN name" clauses
  * Add missing EXPLAIN keyword
  * Fix issue with strip_comments causing a syntax error
  * Fix formatting on INSERT which caused staircase effect on values
  * Avoid formatting of psql commands
  * Unify handling of GROUP BY/ORDER BY
  * Remove unnecessary compat shim for bytes</changelog>
  <changelog author="tchvatal@suse.com" date="1555502400">- Use %pytest macro</changelog>
  <changelog author="dmueller@suse.com" date="1583755200">- update to v0.3.1:
  * Add HQL keywords (pr475, by matwalk).
  * Add support for time zone casts (issue489).
  * Enhance formatting of AS keyword (issue507, by john-bodley).
  * Stabilize grouping engine when parsing invalid SQL statements.
  * Fix splitting of SQL with multiple statements inside
    parentheses (issue485, pr486 by win39).
  * Correctly identify NULLS FIRST / NULLS LAST as keywords (issue487).
  * Fix splitting of SQL statements that contain dollar signs in
    identifiers (issue491).
  * Remove support for parsing double slash comments introduced in
    0.3.0 (issue456) as it had some side-effects with other dialects and
    doesn't seem to be widely used (issue476).
  * Restrict detection of alias names to objects that acutally could
    have an alias (issue455, adopted some parts of pr509 by john-bodley).
  * Fix parsing of date/time literals (issue438, by vashek).
  * Fix initialization of TokenList (issue499, pr505 by john-bodley).
  * Fix parsing of LIKE (issue493, pr525 by dbczumar).
  * Improve parsing of identifiers (pr527 by liulk).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1585051200">- Add stdout-encoding-set.patch to use sys.stdout.reconfigure() if
  the stream is an instance of TextIOWrapper to support a pytest change.</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 0.4.1:
  * Python 3.9 support
  * Remove support for end-of-life Python 2.7 and 3.4. Python 3.5+ is now
  required.
  * Remaining strings that only consist of whitespaces are not treated as
  statements anymore. Code that ignored the last element from
  sqlparse.split() should be updated accordingly since that function
  now doesn't return an empty string as the last element in some
  cases (issue496).
- remove non-upstream stdout-encoding-set.patch patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Disable building a python2 flavor so we can build the package
  for Leap/SLE.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1633089600">- update to 0.4.2 (bsc#1190741, CVE-2021-32839):
  * This release fixes a security vulnerability in the strip
    comments filter.
  * Add ELSIF as keyword (issue584).
  * Add CONFLICT and ON_ERROR_STOP keywords.
  * Fix parsing of backticks (issue588).
  * Fix parsing of scientific number (issue399).</changelog>
  <changelog author="mcepl@suse.com" date="1685016000">- Add CVE-2023-30608-ReDOS-parser.patch fixing bsc#1210617
  (CVE-2023-30608) fixing a regular rexpression that is
  vulnerable to ReDOS (Regular Expression Denial of Service)</changelog>
</package>
<package pkgid="ebbd25c8a85a595dd15baf7e5cff2f4f9317e61c5b1e684dbe8e59fe16440dfb" name="python3-testsuite" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="3bb3f76da8980ca679e9f19e269a00cf002194653e9d12238e9db3cb87c330f5" name="python3-testsuite" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="2c636156dc437f2cd736594ce0dd14118565385c967ebb9cdb8009b00600b58f" name="python3-testsuite" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="9eb66aecf194cf6602468d049ab2cebf01580750133bfc2cf96b3fda21775f10" name="python3-testsuite" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="be5db8f4883d7e174c289c7e34d9205db9b5464205dc384b7c4b0f4cada74086" name="python3-tk" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="2703c9ab3f7131fa95b5e2d730e82793ec37d86b9b1084d39d4fe71c3b8ac49c" name="python3-tk" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="589aa19dd37ff61bc0bf2fa69c4ce25829bffde473966a00a0b4159b21ed00a0" name="python3-tk" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="45ccacfd7d31670a44800e1d5a1d4852208e881c6b65b7404ad386cafa675384" name="python3-tk" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="a04c72d6c7428cea1abe71a70f5a6668757de5e339bf470e58e90debe8c531da" name="python3-tools" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="3d81ba24b25d6299e4bbb06d0d42a92584d3f4918797c4c8112e419553889bc1" name="python3-tools" arch="ppc64le">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="44283c88c0f0ab5fad1b04545a8eae7d384997e521baed721f7d6da61e7dce87" name="python3-tools" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="64f8ccd4a1ec7ec1f0b179d10c5ebd1573d6e69ae7fcc70f6ab53bc79d858c03" name="python3-tools" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="a2f2414e6318636a10d14427d00baed859120db80c70633f5bde8088c5b3e7bb" name="python310" arch="aarch64">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="bbf75535ae24b9ab7b3c8959df637d10301884d8ece24e08760ef73258b8d573" name="python310" arch="ppc64le">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="65d99b7027d991134754cf07b9eab1e374e880f954b8118e5edfd3d73845762a" name="python310" arch="s390x">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="18d65d988e2998a704d72f5f20f414bb4e6da240d0f7515aed497ed69ddd51c2" name="python310" arch="src">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="8e9eab9e2022ae945f9e6f3bfc054deea67c50752fcb0dc5a73259f663e55112" name="python310" arch="x86_64">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="45ee0b46117f51dbdefc403e8aeab71324a7ce79c251b3a7ae1e6008b681f940" name="python310-32bit" arch="x86_64">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="6b15b0715a24b6365b6b08a6cf70a93c47de0c51383fb2117da40b8459faabff" name="python310-base" arch="aarch64">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="b2d181ad9adb7425169d509da1062ab443e0f7f0ddddb7a2a0f6e6261133bd6e" name="python310-base" arch="ppc64le">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-priv-mulitproc-forksrv.patch to avoid
  CVE-2022-42919 (bsc#1204886) avoiding Linux specific local
  privilege escalation via the multiprocessing forkserver start
  method.</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1670500800">- Update to 3.10.9:
  - python -m http.server no longer allows terminal
    control characters sent within a garbage request to be
    printed to the stderr server lo This is done by changing
    the http.server BaseHTTPRequestHandler .log_message method
    to replace control characters with a \xHH hex escape before
    printin
  - Avoid publishing list of active per-interpreter
    audit hooks via the gc module
  - The IDNA codec decoder used on DNS hostnames by
    socket or asyncio related name resolution functions no
    longer involves a quadratic algorithm. This prevents a
    potential CPU denial of service if an out-of-spec excessive
    length hostname involving bidirectional characters were
    decoded. Some protocols such as urllib http 3xx redirects
    potentially allow for an attacker to supply such a name.
  - Update bundled libexpat to 2.5.0
  - Port XKCP’s fix for the buffer overflows in SHA-3
    (CVE-2022-37454).
  - On Linux the multiprocessing module returns
    to using filesystem backed unix domain sockets for
    communication with the forkserver process instead of the
    Linux abstract socket namespace. Only code that chooses
    to use the “forkserver” start method is affected Abstract
    sockets have no permissions and could allow any user
    on the system in the same network namespace (often the
    whole system) to inject code into the multiprocessing
    forkserver process. This was a potential privilege
    escalation. Filesystem based socket permissions restrict
    this to the forkserver process user as was the default in
    Python 3.8 and earlier This prevents Linux CVE-2022-42919
  - Fix a reference bug in _imp.create_builtin()
    after the creation of the first sub-interpreter for modules
    builtins and sys. Patch by Victor Stinner.
  - Fixed a bug that was causing a buffer overflow if
    the tokenizer copies a line missing the newline caracter
    from a file that is as long as the available tokenizer
    buffer. Patch by Pablo galindo
  - Update faulthandler to emit an error message with
    the proper unexpected signal number. Patch by Dong-hee Na.
  - Fix subscription of types.GenericAlias instances
    containing bare generic types: for example tuple[A, T][int],
    where A is a generic type, and T is a type variable.
  - Fix detection of MAC addresses for uuid on certain
    OSs. Patch by Chaim Sanders
  - Print exception class name instead of its string
    representation when raising errors from ctypes calls.
  - Allow pdb to locate source for frozen modules in
    the standard library.
  - Raise ValueError instead of SystemError when
    methods of uninitialized io.IncrementalNewlineDecoder objects
    are called. Patch by Oren Milman.
  - Fix a possible assertion failure in io.FileIO when
    the opener returns an invalid file descriptor.
  - Also escape s in the http.server
    BaseHTTPRequestHandler.log_message so that it is technically
    possible to parse the line and reconstruct what the original
    data was. Without this a xHH is ambiguious as to if it is a
    hex replacement we put in or the characters r”x” came through
    in the original request line.
  - asyncio.get_event_loop() now only emits a
    deprecation warning when a new event loop was created
    implicitly. It no longer emits a deprecation warning if the
    current event loop was set.
  - Fix bug when calling trace.CoverageResults with
    valid infile.
  - Fix a bug in handling class cleanups in
    unittest.TestCase. Now addClassCleanup() uses separate lists
    for different TestCase subclasses, and doClassCleanups() only
    cleans up the particular class.
  - Release the GIL when calling termios APIs to avoid
    blocking threads.
  - Fix ast.increment_lineno() to also cover
    ast.TypeIgnore when changing line numbers.
  - Fixed bug where inspect.signature() reported
    incorrect arguments for decorated methods.
  - Fix SystemError in ctypes when exception was not
    set during __initsubclass__.
  - Fix statistics.NormalDist pickle with 0 and 1
    protocols.
  - Update the bundled copy of pip to version 22.3.1.
  - Apply bugfixes from importlib_metadata 4.11.4,
    namely: In PathDistribution._name_from_stem, avoid
    including parts of the extension in the result. In
    PathDistribution._normalized_name, ensure names loaded from
    the stem of the filename are also normalized, ensuring
    duplicate entry points by packages varying only by
    non-normalized name are hidden.
  - Clean up refleak on failed module initialisation in
    _zoneinfo
  - Clean up refleaks on failed module initialisation
    in in _pickle
  - Clean up refleak on failed module initialisation in
    _io.
  - Fix memory leak in math.dist() when both points
    don’t have the same dimension. Patch by Kumar Aditya.
  - Fix argument typechecks in _overlapped.WSAConnect()
    and _overlapped.Overlapped.WSASendTo() functions.
  - Fix internal error in the re module which in
    very rare circumstances prevented compilation of a regular
    expression containing a conditional expression without the
    “else” branch.
  - Fix asyncio.StreamWriter.drain() to call
    protocol.connection_lost callback only once on Windows.
  - Add a mutex to unittest.mock.NonCallableMock to
    protect concurrent access to mock attributes.
  - Fix hang on Windows in subprocess.wait_closed() in
    asyncio with ProactorEventLoop. Patch by Kumar Aditya.
  - Fix infinite loop in unittest when a
    self-referencing chained exception is raised
  - tkinter.Text.count() raises now an exception for
    options starting with “-” instead of silently ignoring them.
  - On uname_result, restored expectation that _fields
    and _asdict would include all six properties including
    processor.
  - Update the bundled copies of pip and setuptools to
    versions 22.3 and 65.5.0 respectively.
  - Fix bug in urllib.parse.urlparse() that causes
    certain port numbers containing whitespace, underscores,
    plus and minus signs, or non-ASCII digits to be incorrectly
    accepted.
  - Allow venv to pass along PYTHON* variables to
    ensurepip and pip when they do not impact path resolution
  - On macOS, fix a crash in syslog.syslog() in
    multi-threaded applications. On macOS, the libc syslog()
    function is not thread-safe, so syslog.syslog() no longer
    releases the GIL to call it. Patch by Victor Stinner.
  - Allow BUILTINS to be a valid field name for frozen
    dataclasses.
  - Make sure patch.dict() can be applied on async
    functions.
  - To avoid apparent memory leaks when
    asyncio.open_connection() raises, break reference cycles
    generated by local exception and future instances (which has
    exception instance as its member var). Patch by Dong Uk,
    Kang.
  - Prevent error when activating venv in nested fish
    instances.
  - Restrict use of sockets instead of pipes for stdin
    of subprocesses created by asyncio to AIX platform only.
  - shutil.copytree() now applies the
    ignore_dangling_symlinks argument recursively.
  - Fix IndexError in argparse.ArgumentParser when a
    store_true action is given an explicit argument.
  - Document that calling variadic functions with
    ctypes requires special care on macOS/arm64 (and possibly
    other platforms).
  - Skip test_normalization() of test_unicodedata
    if it fails to download NormalizationTest.txt file from
    pythontest.net. Patch by Victor Stinner.
  - Some C API tests were moved into the new
    Lib/test/test_capi/ directory.
  - Fix -Wimplicit-int, -Wstrict-prototypes, and
  - Wimplicit-function-declaration compiler warnings in
    configure checks.
  - Fix -Wimplicit-int compiler warning in configure
    check for PTHREAD_SCOPE_SYSTEM.
  - Specify the full path to the source location for
    make docclean (needed for cross-builds).
  - Fix NO_MISALIGNED_ACCESSES being not defined
    for the SHA3 extension when HAVE_ALIGNED_REQUIRED is
    set. Allowing builds on hardware that unaligned memory
    accesses are not allowed.
  - Fix handling of module docstrings in
    Tools/i18n/pygettext.py.
- Remove upstreamed patches:
  - 98437-sphinx.locale._-as-gettext-in-pyspecific.patch
  - CVE-2015-20107-mailcap-unsafe-filenames.patch
  - CVE-2022-42919-loc-priv-mulitproc-forksrv.patch
  - CVE-2022-45061-DoS-by-IDNA-decode.patch</changelog>
  <changelog author="kukuk@suse.com" date="1674820800">- Disable NIS for new products, it's deprecated and gets removed</changelog>
  <changelog author="mcepl@suse.com" date="1676980800">- Add provides for readline and sqlite3 to the main Python
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Update to 3.10.10:
  Bug fixes and regressions handling, no change of behaviour and
  no security bugs fixed.
- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678708800">- Add invalid-json.patch fixing invalid JSON in
  Doc/howto/logging-cookbook.rst (somehow similar to
  gh#python/cpython#102582).</changelog>
  <changelog author="mcepl@suse.com" date="1682596800">- Update to 3.10.11:
  - Core and Builtins
  - gh-102416: Do not memoize incorrectly automatically
    generated loop rules in the parser. Patch by Pablo Galindo.
  - gh-102356: Fix a bug that caused a crash when deallocating
    deeply nested filter objects. Patch by Marta Gómez Macías.
  - gh-102397: Fix segfault from race condition in signal
    handling during garbage collection. Patch by Kumar Aditya.
  - gh-102126: Fix deadlock at shutdown when clearing thread
    states if any finalizer tries to acquire the runtime head
    lock. Patch by Kumar Aditya.
  - gh-102027: Fix SSE2 and SSE3 detection in _blake2 internal
    module. Patch by Max Bachmann.
  - gh-101967: Fix possible segfault in
    positional_only_passed_as_keyword function, when new list
    created.
  - gh-101765: Fix SystemError / segmentation fault in iter
    __reduce__ when internal access of builtins.__dict__ keys
    mutates the iter object.
  - Library
  - gh-102947: Improve traceback when dataclasses.fields() is
    called on a non-dataclass. Patch by Alex Waygood
  - gh-101979: Fix a bug where parentheses in the metavar
    argument to argparse.ArgumentParser.add_argument() were
    dropped. Patch by Yeojin Kim.
  - gh-102179: Fix os.dup2() error message for negative fds.
  - gh-101961: For the binary mode, fileinput.hookcompressed()
    doesn’t set the encoding value even if the value is
    None. Patch by Gihwan Kim.
  - gh-101936: The default value of fp becomes io.BytesIO
    if HTTPError is initialized without a designated fp
    parameter. Patch by Long Vo.
  - gh-101566: In zipfile, apply fix for extractall on the
    underlying zipfile after being wrapped in Path.
  - gh-101997: Upgrade pip wheel bundled with ensurepip (pip
    23.0.1)
  - gh-101892: Callable iterators no longer raise SystemError
    when the callable object exhausts the iterator but forgets
    to either return a sentinel value or raise StopIteration.
  - gh-97786: Fix potential undefined behaviour in corner cases
    of floating-point-to-time conversions.
  - gh-101517: Fixed bug where bdb looks up the source line
    with linecache with a lineno=None, which causes it to fail
    with an unhandled exception.
  - gh-101673: Fix a pdb bug where ll clears the changes to
    local variables.
  - gh-96931: Fix incorrect results from
    ssl.SSLSocket.shared_ciphers()
  - gh-88233: Correctly preserve “extra” fields in zipfile
    regardless of their ordering relative to a zip64 “extra.”
  - gh-95495: When built against OpenSSL 3.0, the ssl module
    had a bug where it reported unauthenticated EOFs (i.e.
    without close_notify) as a clean TLS-level EOF. It now
    raises SSLEOFError, matching the behavior in previous
    versions of OpenSSL. The options attribute on SSLContext
    also no longer includes OP_IGNORE_UNEXPECTED_EOF by
    default. This option may be set to specify the previous
    OpenSSL 3.0 behavior.
  - gh-94440: Fix a concurrent.futures.process bug where
    ProcessPoolExecutor shutdown could hang after a future has
    been quickly submitted and canceled.
  - Documentation
  - gh-103112: Add docstring to http.client.HTTPResponse.read()
    to fix pydoc output.
  - gh-85417: Update cmath documentation to clarify behaviour
    on branch cuts.
  - gh-97725: Fix asyncio.Task.print_stack() description for
    file=None. Patch by Oleg Iarygin.
  - Tests
  - gh-102980: Improve test coverage on pdb.
  - gh-102537: Adjust the error handling strategy in
    test_zoneinfo.TzPathTest.python_tzpath_context. Patch by
    Paul Ganssle.
  - gh-101377: Improved test_locale_calendar_formatweekday of
    calendar.
  - Build
  - gh-102711: Fix -Wstrict-prototypes compiler warnings.
- Removed upstreamed:
  - invalid-json.patch</changelog>
  <changelog author="mcepl@suse.com" date="1682596801">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
</package>
<package pkgid="3f83c4bea636a0f1646c1e5c30f89e26295bc1248d8d2de5ffd7fdf5a07d4628" name="python310-base" arch="s390x">
  <version epoch="0" ver="3.10.11" rel="150400.4.25.1"/>
  <changelog author="mcepl@suse.com" date="1652184000">- Refresh bluez-devel-vendor.tar.xz</changelog>
  <changelog author="mcepl@suse.com" date="1654516800">- Update to 3.10.5:
  - Core and Builtins
  - gh-93418: Fixed an assert where an f-string has an equal
    sign ‘=’ following an expression, but there’s no trailing
    brace. For example, f”{i=”.
  - gh-91924: Fix __ltrace__ debug feature if the stdout
    encoding is not UTF-8. Patch by Victor Stinner.
  - gh-93061: Backward jumps after async for loops are no
    longer given dubious line numbers.
  - gh-93065: Fix contextvars HAMT implementation to handle
    iteration over deep trees.
  - The bug was discovered and fixed by Eli Libman. See
    MagicStack/immutables#84 for more details.
  - gh-92311: Fixed a bug where setting frame.f_lineno to jump
    over a list comprehension could misbehave or crash.
  - gh-92112: Fix crash triggered by an evil custom mro() on
    a metaclass.
  - gh-92036: Fix a crash in subinterpreters related to the
    garbage collector. When a subinterpreter is deleted,
    untrack all objects tracked by its GC. To prevent a crash
    in deallocator functions expecting objects to be tracked by
    the GC, leak a strong reference to these objects on
    purpose, so they are never deleted and their deallocator
    functions are not called. Patch by Victor Stinner.
  - gh-91421: Fix a potential integer overflow in
    _Py_DecodeUTF8Ex.
  - bpo-47212: Raise IndentationError instead of SyntaxError
    for a bare except with no following indent. Improve
    SyntaxError locations for an un-parenthesized generator
    used as arguments. Patch by Matthieu Dartiailh.
  - bpo-47182: Fix a crash when using a named unicode character
    like "\N{digit nine}" after the main interpreter has been
    initialized a second time.
  - bpo-47117: Fix a crash if we fail to decode characters in
    interactive mode if the tokenizer buffers are
    uninitialized. Patch by Pablo Galindo.
  - bpo-39829: Removed the __len__() call when initializing
    a list and moved initializing to list_extend. Patch by
    Jeremiah Pascual.
  - bpo-46962: Classes and functions that unconditionally
    declared their docstrings ignoring the
  - -without-doc-strings compilation flag no longer do so.
  - The classes affected are ctypes.UnionType,
    pickle.PickleBuffer, testcapi.RecursingInfinitelyError, and
    types.GenericAlias.
  - The functions affected are 24 methods in ctypes.
  - Patch by Oleg Iarygin.
  - bpo-36819: Fix crashes in built-in encoders with error
    handlers that return position less or equal than the
    starting position of non-encodable characters.
  - Library
  - gh-93156: Accessing the pathlib.PurePath.parents sequence
    of an absolute path using negative index values produced
    incorrect results.
  - gh-89973: Fix re.error raised in fnmatch if the pattern
    contains a character range with upper bound lower than
    lower bound (e.g. [c-a]). Now such ranges are interpreted
    as empty ranges.
  - gh-93010: In a very special case, the email package tried
    to append the nonexistent InvalidHeaderError to the defect
    list. It should have been InvalidHeaderDefect.
  - gh-92839: Fixed crash resulting from calling
    bisect.insort() or bisect.insort_left() with the key
    argument not equal to None.
  - gh-91581: utcfromtimestamp() no longer attempts to resolve
    fold in the pure Python implementation, since the fold is
    never 1 in UTC. In addition to being slightly faster in the
    common case, this also prevents some errors when the
    timestamp is close to datetime.min. Patch by Paul Ganssle.
  - gh-92530: Fix an issue that occurred after interrupting
    threading.Condition.notify().
  - gh-92049: Forbid pickling constants re._constants.SUCCESS
    etc. Previously, pickling did not fail, but the result
    could not be unpickled.
  - bpo-47029: Always close the read end of the pipe used by
    multiprocessing.Queue after the last write of buffered data
    to the write end of the pipe to avoid BrokenPipeError at
    garbage collection and at multiprocessing.Queue.close()
    calls. Patch by Géry Ogam.
  - gh-91401: Provide a fail-safe way to disable subprocess use
    of vfork() via a private subprocess._USE_VFORK attribute.
    While there is currently no known need for this, if you
    find a need please only set it to False. File a CPython
    issue as to why you needed it and link to that from
    a comment in your code. This attribute is documented as
    a footnote in 3.11.
  - gh-91910: Add missing f prefix to f-strings in error
    messages from the multiprocessing and asyncio modules.
  - gh-91810: ElementTree method write() and function
    tostring() now use the text file’s encoding (“UTF-8” if not
    available) instead of locale encoding in XML declaration
    when encoding="unicode" is specified.
  - gh-91832: Add required attribute to argparse.Action repr
    output.
  - gh-91700: Compilation of regular expression containing
    a conditional expression (?(group)...) now raises an
    appropriate re.error if the group number refers to not
    defined group. Previously an internal RuntimeError was
    raised.
  - gh-91676: Fix unittest.IsolatedAsyncioTestCase to shutdown
    the per test event loop executor before returning from its
    run method so that a not yet stopped or garbage collected
    executor state does not persist beyond the test.
  - gh-90568: Parsing \N escapes of Unicode Named Character
    Sequences in a regular expression raises now re.error
    instead of TypeError.
  - gh-91595: Fix the comparison of character and integer
    inside Tools.gdb.libpython.write_repr(). Patch by Yu Liu.
  - gh-90622: Worker processes for
    concurrent.futures.ProcessPoolExecutor are no longer
    spawned on demand (a feature added in 3.9) when the
    multiprocessing context start method is "fork" as that can
    lead to deadlocks in the child processes due to a fork
    happening while threads are running.
  - gh-91575: Update case-insensitive matching in the re module
    to the latest Unicode version.
  - gh-91581: Remove an unhandled error case in the
    C implementation of calls to datetime.fromtimestamp with no
    time zone (i.e. getting a local time from an epoch
    timestamp). This should have no user-facing effect other
    than giving a possibly more accurate error message when
    called with timestamps that fall on 10000-01-01 in the
    local time. Patch by Paul Ganssle.
  - bpo-47260: Fix os.closerange() potentially being a no-op in
    a Linux seccomp sandbox.
  - bpo-39064: zipfile.ZipFile now raises zipfile.BadZipFile
    instead of ValueError when reading a corrupt zip file in
    which the central directory offset is negative.
  - bpo-47151: When subprocess tries to use vfork, it now falls
    back to fork if vfork returns an error. This allows use in
    situations where vfork isn’t allowed by the OS kernel.
  - bpo-27929: Fix asyncio.loop.sock_connect() to only resolve
    names for socket.AF_INET or socket.AF_INET6 families.
    Resolution may not make sense for other families, like
    socket.AF_BLUETOOTH and socket.AF_UNIX.
  - bpo-43323: Fix errors in the email module if the charset
    itself contains undecodable/unencodable characters.
  - bpo-47101: hashlib.algorithms_available now lists only
    algorithms that are provided by activated crypto providers
    on OpenSSL 3.0. Legacy algorithms are not listed unless the
    legacy provider has been loaded into the default OSSL
    context.
  - bpo-46787: Fix concurrent.futures.ProcessPoolExecutor
    exception memory leak
  - bpo-45393: Fix the formatting for await x and not x in the
    operator precedence table when using the help() system.
  - bpo-46415: Fix ipaddress.ip_{address,interface,network}
    raising TypeError instead of ValueError if given invalid
    tuple as address parameter.
  - bpo-28249: Set doctest.DocTest.lineno to None when object
    does not have __doc__.
  - bpo-45138: Fix a regression in the sqlite3 trace callback
    where bound parameters were not expanded in the passed
    statement string. The regression was introduced in Python
    3.10 by bpo-40318. Patch by Erlend E. Aasland.
  - bpo-44493: Add missing terminated NUL in sockaddr_un’s
    length
  - This was potentially observable when using non-abstract
    AF_UNIX datagram sockets to processes written in another
    programming language.
  - bpo-42627: Fix incorrect parsing of Windows registry proxy
    settings
  - bpo-36073: Raise ProgrammingError instead of segfaulting on
    recursive usage of cursors in sqlite3 converters. Patch by
    Sergey Fedoseev.
  - Documentation
  - gh-86438: Clarify that -W and PYTHONWARNINGS are matched
    literally and case-insensitively, rather than as regular
    expressions, in warnings.
  - gh-92240: Added release dates for “What’s New in Python
    3.X” for 3.0, 3.1, 3.2, 3.8 and 3.10
  - gh-91888: Add a new gh role to the documentation to link to
    GitHub issues.
  - gh-91783: Document security issues concerning the use of
    the function shutil.unpack_archive()
  - gh-91547: Remove “Undocumented modules” page.
  - bpo-44347: Clarify the meaning of dirs_exist_ok, a kwarg of
    shutil.copytree().
  - bpo-38668: Update the introduction to documentation for
    os.path to remove warnings that became irrelevant after the
    implementations of PEP 383 and PEP 529.
  - bpo-47138: Pin Jinja to a version compatible with Sphinx
    version 3.2.1.
  - bpo-46962: All docstrings in code snippets are now wrapped
    into PyDoc_STR() to follow the guideline of PEP 7’s
    Documentation Strings paragraph. Patch by Oleg Iarygin.
  - bpo-26792: Improve the docstrings of runpy.run_module() and
    runpy.run_path(). Original patch by Andrew Brezovsky.
  - bpo-40838: Document that inspect.getdoc(),
    inspect.getmodule(), and inspect.getsourcefile() might
    return None.
  - bpo-45790: Adjust inaccurate phrasing in Defining Extension
    Types: Tutorial about the ob_base field and the macros used
    to access its contents.
  - bpo-42340: Document that in some circumstances
    KeyboardInterrupt may cause the code to enter an
    inconsistent state. Provided a sample workaround to avoid
    it if needed.
  - bpo-41233: Link the errnos referenced in
    Doc/library/exceptions.rst to their respective section in
    Doc/library/errno.rst, and vice versa. Previously this was
    only done for EINTR and InterruptedError. Patch by Yan
    “yyyyyyyan” Orestes.
  - bpo-38056: Overhaul the Error Handlers documentation in
    codecs.
  - bpo-13553: Document tkinter.Tk args.
  - Tests
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_imaplib.py.
  - gh-92670: Skip
    test_shutil.TestCopy.test_copyfile_nonexistent_dir test on
    AIX as the test uses a trailing slash to force the OS
    consider the path as a directory, but on AIX the trailing
    slash has no effect and is considered as a file.
  - gh-91904: Fix initialization of
    PYTHONREGRTEST_UNICODE_GUARD which prevented running
    regression tests on non-UTF-8 locale.
  - gh-91607: Fix test_concurrent_futures to test the correct
    multiprocessing start method context in several cases where
    the test logic mixed this up.
  - bpo-47205: Skip test for sched_getaffinity() and
    sched_setaffinity() error case on FreeBSD.
  - bpo-47104: Rewrite asyncio.to_thread() tests to use
    unittest.IsolatedAsyncioTestCase.
  - bpo-29890: Add tests for ipaddress.IPv4Interface and
    ipaddress.IPv6Interface construction with tuple arguments.
    Original patch and tests by louisom.
  - Tools/Demos
  - gh-91583: Fix regression in the code generated by Argument
    Clinic for functions with the defining_class parameter.</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Fix building of documentation and the universal configuration of the
  %primary_interpreter.</changelog>
  <changelog author="mcepl@suse.com" date="1658404800">- Switch from %primary_interpreter to prjconf-defined
  %primary_python (gh#openSUSE/python-rpm-macros#127).</changelog>
  <changelog author="coolo@suse.com" date="1659268800">- Extend distutils-reproducible-compile.patch with a workaround
  for non reproducible pyc files issue 93317</changelog>
  <changelog author="mcepl@suse.com" date="1659441600">- Update to 3.10.6:
  - gh-87389: http.server: Fix an open redirection vulnerability
    in the HTTP server when an URI path starts with //.
    Vulnerability discovered, and initial fix proposed, by Hamza
    Avvan. (bsc#1202624, CVE-2021-28861)
  - gh-92888: Fix memoryview use after free when accessing the
    backing buffer in certain cases.
  - gh-95355: _PyPegen_Parser_New now properly detects token
    memory allocation errors. Patch by Honglin Zhu.
  - gh-94938: Fix error detection in some builtin functions when
    keyword argument name is an instance of a str subclass with
    overloaded __eq__ and __hash__. Previously it could cause
    SystemError or other undesired behavior.
  - gh-94949: ast.parse() will no longer parse parenthesized
    context managers when passed feature_version less than
    (3, 9). Patch by Shantanu Jain.
  - gh-94947: ast.parse() will no longer parse assignment
    expressions when passed feature_version less than
    (3, 8). Patch by Shantanu Jain.
  - gh-94869: Fix the column offsets for some expressions in
    multi-line f-strings ast nodes. Patch by Pablo Galindo.
  - gh-91153: Fix an issue where a bytearray item assignment
    could crash if it’s resized by the new value’s __index__()
    method.
  - gh-94329: Compile and run code with unpacking of extremely
    large sequences (1000s of elements). Such code failed to
    compile. It now compiles and runs correctly.
  - gh-94360: Fixed a tokenizer crash when reading encoded
    files with syntax errors from stdin with non utf-8 encoded
    text. Patch by Pablo Galindo
  - gh-94192: Fix error for dictionary literals with invalid
    expression as value.
  - gh-93964: Strengthened compiler overflow checks to prevent
    crashes when compiling very large source files.
  - gh-93671: Fix some exponential backtrace case happening with
    deeply nested sequence patterns in match statements. Patch by
    Pablo Galindo
  - gh-93021: Fix the __text_signature__ for __get__() methods
    implemented in C. Patch by Jelle Zijlstra.
  - gh-92930: Fixed a crash in _pickle.c from mutating
    collections during __reduce__ or persistent_id.
  - gh-92914: Always round the allocated size for lists up to the
    nearest even number.
  - gh-92858: Improve error message for some suites with syntax
    error before ‘:’
  - gh-95339: Update bundled pip to 22.2.1.
  - gh-95045: Fix GC crash when deallocating _lsprof.Profiler by
    untracking it before calling any callbacks. Patch by Kumar
    Aditya.
  - gh-95087: Fix IndexError in parsing invalid date in the email
    module.
  - gh-95199: Upgrade bundled setuptools to 63.2.0.
  - gh-95194: Upgrade bundled pip to 22.2.
  - gh-93899: Fix check for existence of os.EFD_CLOEXEC,
    os.EFD_NONBLOCK and os.EFD_SEMAPHORE flags on older kernel
    versions where these flags are not present. Patch by Kumar
    Aditya.
  - gh-95166: Fix concurrent.futures.Executor.map() to cancel the
    currently waiting on future on an error - e.g. TimeoutError
    or KeyboardInterrupt.
  - gh-93157: Fix fileinput module didn’t support errors option
    when inplace is true.
  - gh-94821: Fix binding of unix socket to empty address
    on Linux to use an available address from the abstract
    namespace, instead of “0”.
  - gh-94736: Fix crash when deallocating an instance of a
    subclass of _multiprocessing.SemLock. Patch by Kumar Aditya.
  - gh-94637: SSLContext.set_default_verify_paths() now releases
    the GIL around SSL_CTX_set_default_verify_paths call. The
    function call performs I/O and CPU intensive work.
  - gh-94510: Re-entrant calls to sys.setprofile() and
    sys.settrace() now raise RuntimeError. Patch by Pablo
    Galindo.
  - gh-92336: Fix bug where linecache.getline() fails on bad
    files with UnicodeDecodeError or SyntaxError. It now returns
    an empty string as per the documentation.
  - gh-89988: Fix memory leak in pickle.Pickler when looking up
    dispatch_table. Patch by Kumar Aditya.
  - gh-94254: Fixed types of struct module to be immutable. Patch
    by Kumar Aditya.
  - gh-94245: Fix pickling and copying of typing.Tuple[()].
  - gh-94207: Made _struct.Struct GC-tracked in order to fix a
    reference leak in the _struct module.
  - gh-94101: Manual instantiation of ssl.SSLSession objects is
    no longer allowed as it lead to misconfigured instances that
    crashed the interpreter when attributes where accessed on
    them.
  - gh-84753: inspect.iscoroutinefunction(),
    inspect.isgeneratorfunction(), and
    inspect.isasyncgenfunction() now properly return True
    for duck-typed function-like objects like instances of
    unittest.mock.AsyncMock.
  - This makes inspect.iscoroutinefunction() consistent with the
    behavior of asyncio.iscoroutinefunction(). Patch by Mehdi
    ABAAKOUK.
  - gh-83499: Fix double closing of file description in tempfile.
  - gh-79512: Fixed names and __module__ value of weakref classes
    ReferenceType, ProxyType, CallableProxyType. It makes them
    pickleable.
  - gh-90494: copy.copy() and copy.deepcopy() now always raise
    a TypeError if __reduce__() returns a tuple with length 6
    instead of silently ignore the 6th item or produce incorrect
    result.
  - gh-90549: Fix a multiprocessing bug where a global named
    resource (such as a semaphore) could leak when a child
    process is spawned (as opposed to forked).
  - gh-79579: sqlite3 now correctly detects DML queries with
    leading comments. Patch by Erlend E. Aasland.
  - gh-93421: Update sqlite3.Cursor.rowcount when a DML
    statement has run to completion. This fixes the row count
    for SQL queries like UPDATE ... RETURNING. Patch by Erlend
    E. Aasland.
  - gh-91810: Suppress writing an XML declaration in open
    files in ElementTree.write() with encoding='unicode' and
    xml_declaration=None.
  - gh-93353: Fix the importlib.resources.as_file() context
    manager to remove the temporary file if destroyed late
    during Python finalization: keep a local reference to the
    os.remove() function. Patch by Victor Stinner.
  - gh-83658: Make multiprocessing.Pool raise an exception if
    maxtasksperchild is not None or a positive int.
  - gh-74696: shutil.make_archive() no longer temporarily changes
    the current working directory during creation of standard
    .zip or tar archives.
  - gh-91577: Move imports in SharedMemory methods to module
    level so that they can be executed late in python
    finalization.
  - bpo-47231: Fixed an issue with inconsistent trailing slashes
    in tarfile longname directories.
  - bpo-46755: In QueueHandler, clear stack_info from LogRecord
    to prevent stack trace from being written twice.
  - bpo-46053: Fix OSS audio support on NetBSD.
  - bpo-46197: Fix ensurepip environment isolation for subprocess
    running pip.
  - bpo-45924: Fix asyncio incorrect traceback when future’s
    exception is raised multiple times. Patch by Kumar Aditya.
  - bpo-34828: sqlite3.Connection.iterdump() now handles
    databases that use AUTOINCREMENT in one or more tables.
  - gh-94321: Document the PEP 246 style protocol type
    sqlite3.PrepareProtocol.
  - gh-86128: Document a limitation in ThreadPoolExecutor where
    its exit handler is executed before any handlers in atexit.
  - gh-61162: Clarify sqlite3 behavior when Using the connection
    as a context manager.
  - gh-87260: Align sqlite3 argument specs with the actual
    implementation.
  - gh-86986: The minimum Sphinx version required to build the
    documentation is now 3.2.
  - gh-88831: Augmented documentation of
    asyncio.create_task(). Clarified the need to keep strong
    references to tasks and added a code snippet detailing how to
    to this.
  - bpo-47161: Document that pathlib.PurePath does not collapse
    initial double slashes because they denote UNC paths.
  - gh-95280: Fix problem with test_ssl test_get_ciphers on
    systems that require perfect forward secrecy (PFS) ciphers.
  - gh-95212: Make multiprocessing test case
    test_shared_memory_recreate parallel-safe.
  - gh-91330: Added more tests for dataclasses to cover behavior
    with data descriptor-based fields.
  - gh-94208: test_ssl is now checking for supported TLS version
    and protocols in more tests.
  - gh-93951: In test_bdb.StateTestCase.test_skip, avoid
    including auxiliary importers.
  - gh-93957: Provide nicer error reporting from subprocesses in
    test_venv.EnsurePipTest.test_with_pip.
  - gh-57539: Increase calendar test coverage for
    calendar.LocaleTextCalendar.formatweekday().
  - gh-92886: Fixing tests that fail when running with
    optimizations (-O) in test_zipimport.py
  - bpo-47016: Create a GitHub Actions workflow for verifying
    bundled pip and setuptools. Patch by Illia Volochii and Adam
    Turner.
  - gh-94841: Fix the possible performance regression of
    PyObject_Free() compiled with MSVC version 1932.
  - gh-95511: Fix the Shell context menu copy-with-prompts bug of
    copying an extra line when one selects whole lines.
  - gh-95471: In the Edit menu, move Select All and add a new
    separator.
  - gh-95411: Enable using IDLE’s module browser with .pyw files.
  - gh-89610: Add .pyi as a recognized extension for IDLE on
    macOS. This allows opening stub files by double clicking on
    them in the Finder.
  - gh-94538: Fix Argument Clinic output to custom file
    destinations. Patch by Erlend E. Aasland.
  - gh-94430: Allow parameters named module and self with custom
    C names in Argument Clinic. Patch by Erlend E. Aasland
  - gh-94930: Fix SystemError raised when
    PyArg_ParseTupleAndKeywords() is used with # in (...) but
    without PY_SSIZE_T_CLEAN defined.
  - gh-94864: Fix PyArg_Parse* with deprecated format units “u”
    and “Z”. It returned 1 (success) when warnings are turned
    into exceptions.
- Reapply patches
  - bpo-31046_ensurepip_honours_prefix.patch
  - fix_configure_rst.patch
  - no-skipif-doctests.patch
  - skip-test_pyobject_freed_is_freed.patch</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- fix import_failed.map to refer to the python 3.10 package versions</changelog>
  <changelog author="mcepl@suse.com" date="1662897600">- Update to 3.10.7:
  - Fix for CVE-2020-10735 (bsc#1203125) Converting between int
    and str in bases other than 2 (binary), 4, 8 (octal), 16
    (hexadecimal), or 32 such as base 10 (decimal) now raises
    a ValueError if the number of digits in string form is above
    a limit to avoid potential denial of service attacks due to
    the algorithmic complexity.
  - Other bug fixes:
  - Fixed a bug that caused _PyCode_GetExtra to return garbage
    for negative indexes.
  - Fix format string in _PyPegen_raise_error_known_location
    that can lead to memory corruption on some 64bit systems.
    The function was building a tuple with i (int) instead of
    n (Py_ssize_t) for Py_ssize_t arguments.
  - Fix misleading contents of error message when converting an
    all-whitespace string to float.
  - coroutine.throw() now properly initializes the frame.f_back
    when resuming a stack of coroutines. This allows e.g.
    traceback.print_stack() to work correctly when an exception
    (such as CancelledError) is thrown into a coroutine.
  - ast.parse() will no longer parse function definitions with
    positional-only params when passed feature_version less
    than (3, 8).
  - Correct conversion of numbers.Rational’s to float.
  - Fix a performance regression in logging
    TimedRotatingFileHandler. Only check for special files when
    the rollover time has passed.
  - Fix unused localName parameter in the Attr class in
    xml.dom.minidom.
  - Update bundled pip to 22.2.2.
  - Fail gracefully if EPERM or ENOSYS is raised when loading
    crypt methods. This may happen when trying to load MD5 on
    a Linux kernel with FIPS enabled.
  - Improve discoverability of the higher level
    concurrent.futures module by providing clearer links from
    the lower level threading and multiprocessing modules.
  - Update the default RFC base URL from deprecated
    tools.ietf.org to datatracker.ietf.org
  - Fix stylesheet not working in Windows CHM htmlhelp docs.
  - The documentation now lists which members of C structs are
    part of the Limited API/Stable ABI.
  - Mitigate the inherent race condition from using
    find_unused_port() in testSockName() by trying to find an
    unused port a few times before failing.
  - Build and test with OpenSSL 1.1.1q
  - Document handling of extensions in Save As dialogs.
  - Include prompts when saving Shell (interactive input and
    output).</changelog>
  <changelog author="schwab@suse.de" date="1663502400">- test-int-timing.patch: gh-96710: Make the test timing more lenient for
  the int/str DoS regression test. (#96717)</changelog>
  <changelog author="mcepl@suse.com" date="1666180800">- Update to 3.10.8:
  - Fix multiplying a list by an integer (list *= int): detect
    the integer overflow when the new allocated length is close
    to the maximum size.
  - Fix a shell code injection vulnerability in the
    get-remote-certificate.py example script. The script no
    longer uses a shell to run openssl commands. (originally
    filed as CVE-2022-37460, later withdrawn)
  - Fix command line parsing: reject -X int_max_str_digits option
    with no value (invalid) when the PYTHONINTMAXSTRDIGITS
    environment variable is set to a valid limit.
  - When ValueError is raised if an integer is larger than the
    limit, mention the sys.set_int_max_str_digits() function in
    the error message.
  - The deprecated mailcap module now refuses to inject unsafe
    text (filenames, MIME types, parameters) into shell
    commands. Instead of using such text, it will warn and act
    as if a match was not found (or for test commands, as if the
    test failed).
  - os.sched_yield() now release the GIL while calling
    sched_yield(2).
  - Bugfix: PyFunction_GetAnnotations() should return a borrowed
    reference. It was returning a new reference.
  - Fixed a missing incref/decref pair in
    Exception.__setstate__().
  - Fix overly-broad source position information for chained
    comparisons used as branching conditions.
  - Fix undefined behaviour in _testcapimodule.c.
  - At Python exit, sometimes a thread holding the GIL can
    wait forever for a thread (usually a daemon thread) which
    requested to drop the GIL, whereas the thread already
    exited. To fix the race condition, the thread which requested
    the GIL drop now resets its request before exiting.
  - Fix a possible assertion failure, fatal error, or SystemError
    if a line tracing event raises an exception while opcode
    tracing is enabled.
  - Fix undefined behaviour in C code of null pointer arithmetic.
  - Do not expose KeyWrapper in _functools.
  - When loading a file with invalid UTF-8 inside a multi-line
    string, a correct SyntaxError is emitted.
  - Disable incorrect pickling of the C implemented classmethod
    descriptors.
  - Fix AttributeError missing name and obj attributes in       .
    object.__getattribute__() bpo-42316: Document some places   .
    where an assignment expression needs parentheses            .
  - Wrap network errors consistently in urllib FTP support, so
    the test suite doesn’t fail when a network is available but
    the public internet is not reachable.
  - Fixes AttributeError when subprocess.check_output() is used
    with argument input=None and either of the arguments encoding
    or errors are used.
  - Avoid spurious tracebacks from asyncio when default executor
    cleanup is delayed until after the event loop is closed (e.g.
    as the result of a keyboard interrupt).
  - Avoid a crash in the C version of
    asyncio.Future.remove_done_callback() when an evil argument
    is passed.
  - Remove tokenize.NL check from tabnanny.
  - Make Semaphore run faster.
  - Fix generation of the default name of
    tkinter.Checkbutton. Previously, checkbuttons in different
    parent widgets could have the same short name and share
    the same state if arguments “name” and “variable” are not
    specified. Now they are globally unique.
  - Update bundled libexpat to 2.4.9
  - Fix race condition in asyncio where process_exited() called
    before the pipe_data_received() leading to inconsistent
    output.
  - Fixed check in multiprocessing.resource_tracker that
    guarantees that the length of a write to a pipe is not
    greater than PIPE_BUF.
  - Corrected type annotation for dataclass attribute
    pstats.FunctionProfile.ncalls to be str.
  - Fix the faulthandler implementation of
    faulthandler.register(signal, chain=True) if the sigaction()
    function is not available: don’t call the previous signal
    handler if it’s NULL.
  - In inspect, fix overeager replacement of “typing.” in
    formatting annotations.
  - Fix asyncio.streams.StreamReaderProtocol to keep a strong
    reference to the created task, so that it’s not garbage
    collected
  - Fix handling compiler warnings (SyntaxWarning and
    DeprecationWarning) in codeop.compile_command() when checking
    for incomplete input. Previously it emitted warnings and
    raised a SyntaxError. Now it always returns None for
    incomplete input without emitting any warnings.
  - Fixed flickering of the turtle window when the tracer is
    turned off.
  - Allow asyncio.StreamWriter.drain() to be awaited concurrently
    by multiple tasks.
  - Fix broken asyncio.Semaphore when acquire is cancelled.
  - Fix ast.unparse() when ImportFrom.level is None
  - Improve performance of urllib.request.getproxies_environment
    when there are many environment variables
  - Fix ! in c domain ref target syntax via a conf.py patch, so
    it works as intended to disable ref target resolution.
  - Clarified the conflicting advice given in the ast
    documentation about ast.literal_eval() being “safe” for use
    on untrusted input while at the same time warning that it
    can crash the process. The latter statement is true and is
    deemed unfixable without a large amount of work unsuitable
    for a bugfix. So we keep the warning and no longer claim that
    literal_eval is safe.
  - Update tutorial introduction output to use 3.10+ SyntaxError
    invalid range.
- Remove upstreamed test-int-timing.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1666353600">- Add 98437-sphinx.locale._-as-gettext-in-pyspecific.patch to
  allow building of documentation with the latest Sphinx 5.3.0
  (gh#python/cpython#98366).</changelog>
  <changelog author="mcepl@suse.com" date="1667476800">- Add CVE-2022-42919-loc-p
[file cut: first 33554432 bytes kept]
[document cut: first 32064876 of 33544734 characters kept]
